CVE-2009-4452: Medium severity kaspersky anti-virus vulnerability
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.
Affected Software
Event History
Frequently Asked Questions
What are the implications of CVE-2009-4452?
CVE-2009-4452 allows unauthorized users to manipulate the BASES directory due to weak permissions, potentially leading to system compromise.
Which versions of Kaspersky software are affected by CVE-2009-4452?
CVE-2009-4452 affects Kaspersky Anti-Virus versions 5.0, 6.0, 7.0, and 8.0, as well as Kaspersky Internet Security versions 7.0, 8.0, and 9.0.
How can I mitigate the risk associated with CVE-2009-4452?
To mitigate CVE-2009-4452, change the permissions of the BASES directory to restrict access to only authorized users.
What is the severity rating of CVE-2009-4452?
CVE-2009-4452 is classified as a high-severity vulnerability due to its potential to allow unauthorized access and control.
Is there an official patch available for CVE-2009-4452?
As of now, there is no official patch for CVE-2009-4452, so manual intervention to change permissions is necessary.