PT-2009-5775 · Pc Security+1 · Pc Security+1

Published 2009-09-30 · Updated 2025-01-21 · CVE-2009-3482

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TrustPort Antivirus versions prior to 2.8.0.2266 PC Security versions prior to 2.0.0.1291

Description The issue allows local users to gain privileges by replacing executables with Trojan horse programs due to weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%.

Recommendations For TrustPort Antivirus versions prior to 2.8.0.2266, update to version 2.8.0.2266 or later. For PC Security versions prior to 2.0.0.1291, update to version 2.0.0.1291 or later.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2009-3482

Affected Products

Pc Security

Trustport Antivirus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-3482 · Security Note
• http://trustport.com/en/notices/security-update-of-trustport-products · Vendor Advisory
• http://secunia.com/advisories/36880 · Vendor Advisory
• https://t.me/cvenotify/70601 · Telegram Post
• http://securityfocus.com/archive/1/506751/100/0/threaded · Note