| Package | Affected versions | Patched versions |
|---|---|---|
| escan anti-virus | = 9.0.722.1 | |
| escan internet security | = 9.0.722.1 | |
| escan virus control | = 9.0.722.1 |
MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free