CVE-2009-3482

High

Description

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs.

SeverityHigh
CVSS7.8
Exploit probability—
ProductTrustport Antivirus
PublishedSep 30, 2009
First seenSep 30, 2009
Weakness typeCWE-732CWE-732

How to fix

Update
  • trustport antivirus2.8.0.2266 or later
  • trustport pc_security2.0.0.1291 or later

Affected products

ProductAffected versionsFixed in
trustport antivirusv < 2.8.0.22662.8.0.2266
trustport pc_securityv < 2.0.0.12912.0.0.1291

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2009-3482 · Trustport Antivirus · Dark Radar