[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
{PRL} QuickHeal antivirus 2010 Local Privilege Escalation
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: {PRL} QuickHeal antivirus 2010 Local Privilege Escalation
- From: Protek Research Lab <protekresearchlab@xxxxxxxx>
- Date: Wed, 16 Dec 2009 08:55:33 -0800 (PST)
#####################################################################################
Application: QuickHeal antivirus 2010 Local Privilege Escalation
Platforms: Windows Vista SP2
Exploitation: Local Privilege Escalation
Date: 2009-12-16
Author: Francis Provencher (Protek Research Lab's)
#####################################################################################
1) Introduction
2) Technical details
3) The Code (N/A)
#####################################################################################
===============
1) Introduction
===============
QuickHeal antivirus 2010
Quick Heal AntiVirus 2010, with its intuitive and easy-to-use interface,
provides hassle-free protection for your system. Once
installed it acts as a shield against viruses, worms, trojans, spywares and
other malicious threats. It also provides protection
against new and unknown viruses using Quick Heal's renowned DNAScan technology,
and blocks malicious websites. Quick Heal AntiVirus
2010 is very low on resource usage and gives enhanced protection without
slowing down your computer.
(from QuickHeal Anti-virus website)
#####################################################################################
============================
2) Technical details
============================
QuickHeal antivirus 2010
Build 11.00 (4.0.0.1)
All files under the install folder have Full control for BUILTIN\users and can
be replace with malicious files.
... snip ...
C:\Program Files\Quick Heal\Quick Heal AntiVirus\SCANWSCS.EXE Everyone:(ID)F
... snip ...
#####################################################################################
===========
3) The Code
===========
N\A
#####################################################################################
(PRL-2009-25)
__________________________________________________________________
Looking for the perfect gift? Give the gift of Flickr!
http://www.flickr.com/gift/