CVEvulnerability
CVE-2006-1355
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-03-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
Affected configurations
• alwil avast antivirus (<= 4.6.763)
References
- http://forum.avast.com/index.php?topic=19862.0 forum.avast.com
- http://secunia.com/advisories/19284 Vendor Advisory
- http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20 www.dslreports.com
- http://www.securityfocus.com/bid/17158 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1011 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25336 exchange.xforce.ibmcloud.com
- http://forum.avast.com/index.php?topic=19862.0 forum.avast.com
- http://secunia.com/advisories/19284 Vendor Advisory
- http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20 www.dslreports.com
- http://www.securityfocus.com/bid/17158 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1011 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25336 exchange.xforce.ibmcloud.com