Description
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
References
- http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
- 19284 third-party-advisory
- http://forum.avast.com/index.php?topic=19862.0
- ADV-2006-1011 vdb-entry
- avast-default-insecure-permissions(25336) vdb-entry
- 17158 vdb-entry