PT-2018-14189

CVE-2018-17776

Publicado

2018-09-28

Atualizado

2021-08-16

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PCProtect Anti-Virus version 4.8.35

Description The issue allows local users to gain privileges by replacing an executable file with a Trojan horse due to "Everyone: (F)" permission for %PROGRAMFILES(X86)%PCProtect.

Recommendations For PCProtect Anti-Virus version 4.8.35, consider restricting access to the %PROGRAMFILES(X86)%PCProtect directory to prevent local users from replacing executable files until a patch is available.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Hashim Jawad

Ihack4Falafel

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-732: Incorrect Permission Assignment for Critical Resource

Identificadores relacionados