CVE-2007-4649

Published: Aug 31, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.

Affected (3)

Products: Microworld Technologies: Escan Anti Virus, Escan Internet Security, Escan Virus Control

Microworld Technologies

3 products

Escan Anti Virus

Escan Internet Security

Escan Virus Control

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microworld Technologies Escan Anti Virus	Version 9.0.722.1
Microworld Technologies Escan Internet Security	Version 9.0.722.1
Microworld Technologies Escan Virus Control	Version 9.0.722.1