Description
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.
References
- 37991 vdb-entry
- 27094 third-party-advisory
- 25930 vdb-entry
- 20071004 Vba32 AntiVirus v3.12.2 insecure file permissions mailing-list
- http://www.anti-virus.by/en/