CVEvulnerability

CVE-2009-4452

6.8 MEDIUM Published 2009-12-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-12-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.

Affected configurations

• kaspersky lab kaspersky anti-virus 5.0.712 • kaspersky lab kaspersky anti-virus 6.0.3.837 • kaspersky lab kaspersky anti-virus 7.0.1.325 • kaspersky lab kaspersky anti-virus 2009 8.0.0.454 • kaspersky lab kaspersky anti-virus 2010 9.0.0.463 • kaspersky lab kaspersky anti-virus personal 5.0 • kaspersky lab kaspersky anti-virus personal 5.0.227 • kaspersky lab kaspersky anti-virus personal 5.0.228 • kaspersky lab kaspersky anti-virus personal 5.0.325 • kaspersky lab kaspersky internet security 7.0.1.325 • kaspersky lab kaspersky internet security 2009 8.0.0.506 • kaspersky lab kaspersky internet security 2010 9.0.0.463

Related

Weakness · not in database (1)

References