Local Privilege Escalation in MicroWorld eScan Virus Control and Internet Security Products
CVE-2007-4649
Currently unrated
What is CVE-2007-4649?
MicroWorld eScan Virus Control and its related products are plagued by a vulnerability arising from weak permissions set to 'Everyone: Full Control' in the installation directory. This misconfiguration permits local users to elevate their privileges by substituting application files, potentially leading to malicious actions. The vulnerability is particularly illustrated by the modification of 'traysser.exe', emphasizing the urgent need to secure installation paths and restrict access rights to prevent unauthorized alterations.