Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2009-4452

Published: 29/12/2009 Updated: 10/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 10 | Exploitability Score: 3.1
VMScore: 685
Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Subscribe to Kaspersky Anti-virus 2010

Vulnerability Summary

Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.

Vulnerable Product Search on Vulmon Subscribe to Product

kaspersky lab kaspersky anti-virus 2010 9.0.0.463

kaspersky lab kaspersky anti-virus 5.0.712

kaspersky lab kaspersky internet security 2010 9.0.0.463

kaspersky lab kaspersky anti-virus personal 5.0.228

kaspersky lab kaspersky anti-virus personal 5.0.325

kaspersky lab kaspersky internet security 7.0.1.325

kaspersky lab kaspersky internet security 2009 8.0.0.506

kaspersky lab kaspersky anti-virus personal 5.0

kaspersky lab kaspersky anti-virus personal 5.0.227

kaspersky lab kaspersky anti-virus 7.0.1.325

kaspersky lab kaspersky anti-virus 2009 8.0.0.454

kaspersky lab kaspersky anti-virus 6.0.3.837

Exploits

Exploit DB: Kaspersky Lab (Multiple Products) - Local Privilege Escalation
ShineShadow Security Report 16122009-15 TITLE Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability BACKGROUND Due to its high level of professionalism and dedication, Kaspersky Lab has become a market leader in the development of antivirus protection The company’s main product, Kaspersky Anti-Virus, regularly receives to ...

References

CWE-264http://www.exploit-db.com/exploits/10484http://www.securitytracker.com/id?1023367http://secunia.com/advisories/37398http://www.vupen.com/english/advisories/2009/3573http://www.securitytracker.com/id?1023366http://secunia.com/advisories/37730http://www.securityfocus.com/archive/1/508508/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/10484/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook