CVE-2009-4452
mediumpriority · track · 37EPSS 0.008 · 57 %ileexploit · functionalEUUSEPSS · scored 2026-10-28
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
- EDB-10484Kaspersky Lab (Multiple Products) - Local Privilege Escalationfunctional · exploit_db
affected products (13)
Products and version ranges known to be affected.
- kaspersky lab kaspersky anti-virus= 5.0.712nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus= 6.0.3.837nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus= 7.0.1.325nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus 2009= 8.0.0.454nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_2009:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus 2010= 9.0.0.463nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_2010:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus personal= 5.0nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus personal= 5.0.227nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus personal= 5.0.228nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky anti-virus personal= 5.0.325nvdUScpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky internet security= 7.0.1.325nvdUScpe:2.3:a:kaspersky_lab:kaspersky_internet_security:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky internet security 2009= 8.0.0.506nvdUScpe:2.3:a:kaspersky_lab:kaspersky_internet_security_2009:*:*:*:*:*:*:*:*
- kaspersky lab kaspersky internet security 2010= 9.0.0.463nvdUScpe:2.3:a:kaspersky_lab:kaspersky_internet_security_2010:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (14)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/37398enisa_euvd
- http://secunia.com/advisories/37730enisa_euvd
- http://www.exploit-db.com/exploits/10484enisa_euvd
- http://www.securityfocus.com/archive/1/508508/100/0/threadedenisa_euvd
- http://www.securitytracker.com/id?1023366enisa_euvd
- http://www.securitytracker.com/id?1023367enisa_euvd
- http://www.vupen.com/english/advisories/2009/3573enisa_euvd
- http://secunia.com/advisories/37398Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan