CVE-2010-2308

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus versions prior to 7.6.20

Description The issue is related to an unspecified vulnerability in the filter driver (savonaccessfilter.sys) of Sophos Anti-Virus. This vulnerability allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.

Recommendations For versions prior to 7.6.20, update to version 7.6.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the savonaccessfilter.sys driver to minimize the risk of exploitation.