Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

Bugtraq ID:	37358
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 16 2009 12:00AM
Updated:	Dec 17 2009 08:03PM
Credit:	Francis Provencher from Protek Research Labs
Vulnerable:	Cat Computer Services Quick Heal Antivirus 2010 4.0.0.1 Cat Computer Services Quick Heal Antivirus
Not Vulnerable:

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

Quick Heal AntiVirus is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, resulting in a complete compromise of the affected computer.

Quick Heal AntiVirus 2010 is vulnerable; other versions may also be affected.

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

An attacker can use readily available command-line utilities to exploit this issue.

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

References:

• Quick Heal Homepage (Quick Heal)
  
• {PRL} QuickHeal antivirus 2010 Local Privilege Escalation (Protek Research Lab )