Description
Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.
References
- 20051115 Multiple Vendor Insecure Call to CreateProcess() Vulnerability third-party-advisory
- 1015224 vdb-entry
- 187 third-party-advisory