NVD

Id
51575  
Name
CVE-2009-4452  
Description
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-29  
Modified Date
2009-12-30  
Seq
2009-4452  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261485 51575 CVE-2009-4452 10484  View
261486 51575 CVE-2009-4452 20091216 Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability  View
261487 51575 CVE-2009-4452 1023366  View
261488 51575 CVE-2009-4452 1023367  View
261489 51575 CVE-2009-4452 ADV-2009-3573  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44240 JVNDB-2009-005247 Kaspersky Anti-Virus などにおける SYSTEM 権限を取得される脆弱性 Kaspersky Anti-Virus、AntiVirus Personal、Anti-Virus 2009、Anti-Virus 2010、Internet Security、Internet Security 2009、および Internet Security 2010 には、BASES ディレクトリに脆弱なパーミション (全員: フルコントロール) を使用するため、SYSTEM 権限を取得される脆弱性が存在します。 CVE-2009-4452 41883 CVE-2009-4452 51575 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005247.html 2009-12-29 2012-09-25 View