CVE-2009-3482

ALTO 7.8CVE-2009-3482 · Published 30/09/2009 · updated 16/06/2026

In breve

CVE-2009-3482 è una vulnerabilità ALTO (CVSS 7.8) che riguarda antivirus (trustport), pc security (trustport).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 21.7% delle vulnerabilità.
Correzione: aggiornare a 2.8.0.2266, 2.0.0.1291 o successiva.

Package	Affected versions	Patched versions
antivirus trustport	`< 2.8.0.2266`	`2.8.0.2266`
pc security trustport	`< 2.0.0.1291`	`2.0.0.1291`

Description

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs.

References

secunia.com/advisories/36880 · Broken Link
securityfocus.com/archive/1/506751/100/0/threaded · Broken Link
trustport.com/en/notices/security-update-of-trustport-products · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free