CVEvulnerability
CVE-2004-2676
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges.
Affected configurations
• webroot software spy sweeper enterprise 1.5.1 build 3698
References
- http://secunia.com/advisories/13187 Patch, Vendor Advisory
- http://secunia.com/secunia_research/2004-14/advisory/ Patch, Vendor Advisory
- http://securitytracker.com/id?1012652 Patch, Vendor Advisory
- http://www.osvdb.org/12534 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18628 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13187 Patch, Vendor Advisory
- http://secunia.com/secunia_research/2004-14/advisory/ Patch, Vendor Advisory
- http://securitytracker.com/id?1012652 Patch, Vendor Advisory
- http://www.osvdb.org/12534 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18628 exchange.xforce.ibmcloud.com