CVE-2009-4556
Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs,…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.70% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- quickheal/antivirus plus 2009 · quickheal/total security 2009
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/37033Vendor Advisory
- http://www.securityfocus.com/archive/1/507121/100/0/threaded
- http://www.securityfocus.com/bid/36662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53746
- http://secunia.com/advisories/37033Vendor Advisory
- http://www.securityfocus.com/archive/1/507121/100/0/threaded
- http://www.securityfocus.com/bid/36662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53746
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.