CVE-2010-2308

Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.

• http://dvlabs.tippingpoint.com/advisory/TPTI-10-03
• http://secunia.com/advisories/40085Vendor Advisory
• http://www.securityfocus.com/archive/1/511773/100/0/threaded
• http://www.securitytracker.com/id?1024089
• http://www.sophos.com/support/knowledgebase/article/111126.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/1412Vendor Advisory
• http://dvlabs.tippingpoint.com/advisory/TPTI-10-03
• http://secunia.com/advisories/40085Vendor Advisory
• http://www.securityfocus.com/archive/1/511773/100/0/threaded
• http://www.securitytracker.com/id?1024089
• http://www.sophos.com/support/knowledgebase/article/111126.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/1412Vendor Advisory

Published

Jun 16, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2302Use-after-free vulnerability in WebCore in WebKit in Google …
• CVE-2010-2303Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-2304Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-2305Buffer overflow in an ActiveX control in SSHelper.dll for Sy…
• CVE-2010-2306The default installation of Sourcefire 3D Sensor 1000, 2000,…
• CVE-2010-2307Multiple directory traversal vulnerabilities in the web serv…
• CVE-2010-2309Buffer overflow in the web server for EvoLogical EvoCam 3.6.…
• CVE-2010-2310SolarWinds TFTP Server 10.4.0.13 allows remote attackers to …
• CVE-2010-2311Stack-based buffer overflow in Power Tab Editor 1.7 build 80…
• CVE-2010-2312SQL injection vulnerability in index.php in HauntmAx Haunted…
• CVE-2010-2313Directory traversal vulnerability in index.php in Anodyne Pr…
• CVE-2010-2314PHP remote file inclusion vulnerability in nucleus/plugins/N…