CVE-2009-4556

CVE-2009-4556 affects Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1. The issue arises from weak permissions (Everyone: Full Control) on product files, enabling local privilege escalation by replacing executables such as quhlpsvc.exe with Trojan horses. The ...