Kaspersky Antivirus Incorrect %PROGRAMDATA% ACL

Discussion in 'News Aggregator' started by Packet Storm, 17 Nov 2015.

  1. Packet Storm

    Packet Storm Guest

    The ACL on %PROGRAMDATA%\Kaspersky Lab allows BUILTIN\Users to create new files. This can be abused to create new plugins and modules during update, and other filesystem races to gain elevated privileges.

    Continue reading...
     

Share This Page

Loading...