CVE-2018-17776

CVE-2018-17776 affects PCProtect Anti-Virus v4.8.35. The vulnerability arises from overly permissive ACL on %PROGRAMFILES(X86)%\PCProtect, granting Everyone: (F) and enabling local users to replace an executable with a Trojan horse to gain privileges (local privilege escalation). Root cause: inco...

CVE-2019-16913

PC Protect Antivirus (v4.14.31) is installed to %PROGRAMFILES(X86)%\PCProtect with overly permissive folder ACLs (Everyone: (F)). The component also creates a service (SecurityService) that runs as LocalSystem. This combination enables privilege escalation to NT AUTHORITY\SYSTEM by replacing the ...