CVE-2006-0858

Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a malicious "program" file in the C: folder.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-02-23

Last modified

2024-08-07

Affected products

• Safe N Sec Personal + Anti-spyware (Starforce)

References

• http://secdev.zoller.lu/research/safnsec.htm
• http://www.securityfocus.com/archive/1/425504/100/0/threaded
• http://www.securityfocus.com/bid/16762