description: Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to trigger a crash or wait upon Webroot service restart to rewrite and hijack dlls in this directory for privilege escalation.
problem types: Local Privilege Escalation
affected:
{
product: Webroot SecureAnywhere
vendor: n/a
versions:
status: affected, version: All versions prior to version v9.0.28.48
}