CVE-2009-4215

2009-12-0717:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.

References

secunia.com/advisories/37373

www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2

www.securityfocus.com/archive/1/507811/100/0/threaded

www.securitytracker.com/id?1023121

www.vupen.com/english/advisories/2009/3126

exchange.xforce.ibmcloud.com/vulnerabilities/54268