PT-2018-14189

CVE-2018-17776

Published

2018-09-28

Updated

2021-08-16

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PCProtect Anti-Virus version 4.8.35

Description The issue allows local users to gain privileges by replacing an executable file with a Trojan horse due to "Everyone: (F)" permission for %PROGRAMFILES(X86)%PCProtect.

Recommendations For PCProtect Anti-Virus version 4.8.35, consider restricting access to the %PROGRAMFILES(X86)%PCProtect directory to prevent local users from replacing executable files until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Hashim Jawad

Ihack4Falafel

Vendors

Affected products

Weakness enumeration

CWE-732: Incorrect Permission Assignment for Critical Resource

Related identifiers