| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint agents | < 9.0.28.48 | 9.0.28.48 |
Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to trigger a crash or wait upon Webroot service restart to rewrite and hijack dlls in this directory for privilege escalation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free