Lucene search

[email protected]CVE-2009-4556

HistoryJan 04, 2010 - 9:30 p.m.

CVE-2009-4556

2010-01-0421:30:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2009-4556

quick heal

antivirus

total security

weak permissions

privilege escalation

vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.

Affected configurations

NVD

Node

quickhealantivirus_plus_2009Match10.00sp1

quickhealtotal_security_2009Match10.00sp1

CPENameOperatorVersion
quickheal:antivirus_plus_2009quickheal antivirus plus 2009eq10.00
quickheal:total_security_2009quickheal total security 2009eq10.00

CPE	Name	Operator	Version
quickheal:antivirus_plus_2009	quickheal antivirus plus 2009	eq	10.00
quickheal:total_security_2009	quickheal total security 2009	eq	10.00

References

secunia.com/advisories/37033

www.securityfocus.com/archive/1/507121/100/0/threaded

www.securityfocus.com/bid/36662

exchange.xforce.ibmcloud.com/vulnerabilities/53746

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2009-4556

prion1 cvelist1 nvd1