Avast! Insecure Program File Permissions Local Privilege Escalation

Avast! Antivirus is an application that provides virus protection. The application is exposed to a local privilege escalation issue because it installs the "avast4.ini" file in the data folder "%Program Files%Alwil SoftwareAvast4Data" with "Full Control" permissions for the "Everyone" group. Avast! Professional Edition version 4.8.1351 and earlier and Avast! Home are affected. Edition version 4.8.1351 and earlier are affected by this issue.



Ref: http://www.avast.com/eng/avast-4-home_pro-revision-history.html



09.44.6 - CVE: CVE-2009-3524

Platform: Third Party Windows Apps