Description
Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
References
- 40085 third-party-advisory
- http://dvlabs.tippingpoint.com/advisory/TPTI-10-03
- http://www.sophos.com/support/knowledgebase/article/111126.html
- 20100609 TPTI-10-03: Sophos Anti-Virus SAVOnAccessFilter Local Privilege Escalation Vulnerability mailing-list
- 1024089 vdb-entry
- ADV-2010-1412 vdb-entry