Description
MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Edi Strosar · textlocalwindows
https://www.exploit-db.com/exploits/30546
References (5)
Core 5
Core References
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3085
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25493
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26581
Exploit mailing-list
x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065509.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36367
Scores
EPSS
0.0035
EPSS Percentile
57.1%
Details
CWE
CWE-264
Status
published
Products (3)
microworld_technologies/escan_anti-virus
9.0.722.1
microworld_technologies/escan_internet_security
9.0.722.1
microworld_technologies/escan_virus_control
9.0.722.1
Published
Aug 31, 2007
Tracked Since
Feb 18, 2026