CVE-2006-1355

avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-03-22

Last modified

2024-08-07

Affected products

• Avast Antivirus (Alwil)

References

• http://forum.avast.com/index.php?topic=19862.0
• http://secunia.com/advisories/19284
• http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
• http://www.securityfocus.com/bid/17158
• http://www.vupen.com/english/advisories/2006/1011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25336