SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2009-4452

Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full…

MEDIUM 6.8EPSS 0.82%

Does this matter?

Lower severity and a low EPSS score (0.82%). Track it; it rarely justifies an emergency change on its own.

Description

Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.

CVSS 2.0
6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
EPSS
0.82% probability · 55th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
kaspersky lab/kaspersky anti-virus · kaspersky lab/kaspersky anti-virus 2009 · kaspersky lab/kaspersky anti-virus 2010 · kaspersky lab/kaspersky anti-virus personal · kaspersky lab/kaspersky internet security · kaspersky lab/kaspersky internet security 2009 · kaspersky lab/kaspersky internet security 2010
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.