Kaspersky · Kaspersky Internet Security · CVE-2009-4452
**Name of the Vulnerable Software and Affected Versions**
Kaspersky Anti-Virus versions 5.0 through 9.0.0.463
Kaspersky Antivirus Personal version 5.0.x
Kaspersky Internet Security versions 7.0.1.325 through 9.0.0.463
**Description**
The issue allows local users to gain SYSTEM privileges by exploiting weak permissions set for the BASES directory. This can be achieved by replacing an executable or DLL with a Trojan horse, potentially leading to elevated access.
**Recommendations**
For Kaspersky Anti-Virus versions 5.0 through 9.0.0.463, consider restricting access to the BASES directory to prevent local users from replacing executables or DLLs with malicious files.
For Kaspersky Antivirus Personal version 5.0.x, restrict access to the BASES directory to minimize the risk of exploitation.
For Kaspersky Internet Security versions 7.0.1.325 through 9.0.0.463, limit access to the BASES directory to prevent unauthorized modifications.