Design/Logic Flaw

An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product...

CVE-2018-7535

CVE-2018-7535 concerns TotalAV v4.1.7 where weak permissions in the installation folder allow an unprivileged, local user to modify or overwrite any product files, enabling potential privilege escalation and full control over the product. Root cause: overly permissive access (Everyone:F) under %P...

CVE-2018-7535

An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product...