What is the severity of CVE-2009-4556?

CVE-2009-4556 has a high severity due to the potential for local privilege escalation by replacing executable files.

How do I fix CVE-2009-4556?

To mitigate CVE-2009-4556, adjust file permissions to restrict access to the Quick Heal product files and limit 'Full Control' permissions.

How can local users exploit CVE-2009-4556?

Local users can exploit CVE-2009-4556 by replacing vulnerable executables with malicious programs due to weak file permissions.

Is there a patch available for CVE-2009-4556?

As of now, there is no official patch available for CVE-2009-4556, so manual mitigation steps should be implemented.

Vulnerability/
CVE-2009-4556

high

7.2

CWE

264

4/1/2010

7/8/2024

CVE-2009-4556

First published: Mon Jan 04 2010(Updated: )

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Quickheal Antivirus Plus 2009	=10.00-sp1
Quickheal Total Security 2009	=10.00-sp1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2009-4556?
CVE-2009-4556 has a high severity due to the potential for local privilege escalation by replacing executable files.
How do I fix CVE-2009-4556?
To mitigate CVE-2009-4556, adjust file permissions to restrict access to the Quick Heal product files and limit 'Full Control' permissions.
What products are affected by CVE-2009-4556?
CVE-2009-4556 affects Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1.
How can local users exploit CVE-2009-4556?
Local users can exploit CVE-2009-4556 by replacing vulnerable executables with malicious programs due to weak file permissions.
Is there a patch available for CVE-2009-4556?
As of now, there is no official patch available for CVE-2009-4556, so manual mitigation steps should be implemented.

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
agent/references
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/tags
agent/source
vendor/quickheal
canonical/quickheal antivirus plus 2009
version/quickheal antivirus plus 2009/10.00-sp1
canonical/quickheal total security 2009
version/quickheal total security 2009/10.00-sp1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2009-4556?
CVE-2009-4556 has a high severity due to the potential for local privilege escalation by replacing executable files.
How do I fix CVE-2009-4556?
To mitigate CVE-2009-4556, adjust file permissions to restrict access to the Quick Heal product files and limit 'Full Control' permissions.
What products are affected by CVE-2009-4556?
CVE-2009-4556 affects Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1.
How can local users exploit CVE-2009-4556?
Local users can exploit CVE-2009-4556 by replacing vulnerable executables with malicious programs due to weak file permissions.
Is there a patch available for CVE-2009-4556?
As of now, there is no official patch available for CVE-2009-4556, so manual mitigation steps should be implemented.

CVE-2009-4556

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2009-4556?

How do I fix CVE-2009-4556?

What products are affected by CVE-2009-4556?

How can local users exploit CVE-2009-4556?

Is there a patch available for CVE-2009-4556?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2009-4556?

How do I fix CVE-2009-4556?

What products are affected by CVE-2009-4556?

How can local users exploit CVE-2009-4556?

Is there a patch available for CVE-2009-4556?