CVE-2009-4556

NONE EPSS 48.8%

Published Jan 4, 201016y ago · Modified Jun 16, 20262w ago

Published Jan 4, 2010 16y ago

Last Modified Jun 16, 2026 2w ago

Description

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.

Threat Intelligence

EPSS Exploit Probability

48.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-264

Affected Products 2

Vendor	Product	Version	Range
quickheal	antivirus_plus_2009	10.00	any
quickheal	total_security_2009	10.00	any

References 4

secunia.com http://secunia.com/advisories/37033

Vendor Advisory
securityfocus.com http://www.securityfocus.com/archive/1/507121/100/0/threaded
securityfocus.com http://www.securityfocus.com/bid/36662
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/53746

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.