CVE-2006-1274

2006-03-1911:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

JSON

Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-March/042868.html

secunia.com/advisories/19217

securityreason.com/securityalert/573

www.osvdb.org/23843

www.securityfocus.com/archive/1/427412/100/0/threaded

www.securityfocus.com/bid/17071

www.vupen.com/english/advisories/2006/0948

exchange.xforce.ibmcloud.com/vulnerabilities/25244