high7.2
CVE-2009-2761
Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional mig…
Impact
Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira\" directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avira | Antivir | All versions |
| Avira | Antivir Security Suite | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html
- http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html
- http://www.osvdb.org/55647
- http://www.vupen.com/english/advisories/2008/3130
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46568
- http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html
- http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html
- http://www.osvdb.org/55647
- http://www.vupen.com/english/advisories/2008/3130
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46568