Description
The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
References
- 1920 vdb-entry
- 20001103 Elevation of Privileges Exploit with McAfee VirusScan 4.5 mailing-list