CVE-2009-3482

HIGH

Trustport Antivirus < 2.8.0.2266 - Incorrect Permission Assignment

Title source: rule

Description

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs.

References (3)

Core 3

Core References

Broken Link, Vendor Advisory x_refsource_confirm

http://www.trustport.com/en/notices/security-update-of-trustport-products

Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/36880

Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/506751/100/0/threaded

Scores

CVSS v3 7.8

EPSS 0.0009

EPSS Percentile 25.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-732

Status published

Products (2)

trustport/antivirus < 2.8.0.2266

trustport/pc_security < 2.0.0.1291

Published Sep 30, 2009

Tracked Since Feb 18, 2026