CVE-2019-16913

HIGH 7.8CVE-2019-16913 · Published 07/10/2019 · updated 17/06/2026

In short

CVE-2019-16913 is a HIGH (CVSS 7.8) vulnerability affecting antivirus (pcprotect).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
antivirus pcprotect	`= 4.14.31`	No fix yet

Description

PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILES(X86)%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: (F)" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as LocalSystem. This allows any user to escalate privileges to "NT AUTHORITY\SYSTEM" by substituting the service's binary with a Trojan horse.

References

flipflopsecurity.wordpress.com/2019/10/07/pc-protect-v4-14-31-privilege-esclation · Exploit

More vulnerabilities in antivirus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free