Code injection

2009-09-3015:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs.

CPENameOperatorVersion
antiviruslt2.8.0.2266
pc_securitylt2.0.0.1291

CPE	Name	Operator	Version
	antivirus	lt	2.8.0.2266
	pc_security	lt	2.0.0.1291

References

secunia.com/advisories/36880

www.securityfocus.com/archive/1/506751/100/0/threaded

www.trustport.com/en/notices/security-update-of-trustport-products