CVE:CVE-2009-4556
CNNVD:CNNVD-201001-320
Quick Heal AntiVirus Plus 2009和Quick Heal Total Security 2009都是印度Quick Heal公司的杀毒软件。
Quick Heal AntiVirus Plus 2009 10.00 SP1版本和Quick Heal Total Security 2009 10.00 SP1版本中存在安全漏洞，该漏洞源于程序为product文件分配弱权限（Everyone: Full Control）。本地攻击者可通过使用Trojan horse程序替换可执行文件，利用该漏洞获取权限。
solution:Upgrade quickheal antivirus_plus_2009 to a higher version than 10.00:sp1,and avoid the version 10.00:sp1; Upgrade quickheal total_security_2009 to a higher version than 10.00:sp1,and avoid the version 10.00:sp1