CVE-2009-4556

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files…

published January 4, 2010

CVSS
—
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00705 · 52.8th percentile
Published
2010-01-04T21:00Z
EPSS history
Timeline
  • 04 JAN 21:00Z
    Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files…
    cvelistv5