Back to Database
Status published
High
CVE-2009-4556
Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal...
Vulnerability Description
Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4556
Credits & Attribution
No credits recorded in the NVD database.
References
More from quickheal
View All →CVE-2022-31467
DLL Hijacking Vulnerability in Quick Heal Total Security
High
7.9
CVE-2022-31466
TOCTOU Vulnerability in Quick Heal Total Security
High
7.9
CVE-2020-9362
The Quick Heal AV parsing engine (November 2019) allows virus-detection...
High
7.8
CVE-2020-27587
Quick Heal Total Security before 19.0 allows attackers with local...
Medium
6.7
CVE-2020-27586
Quick Heal Total Security before version 19.0 transmits quarantine and...
Medium
5.9
Affected Vendor
quickheal
View all reports →Affected Software
antivirus plus 2009, total security 2009
Vulnerable Versions:
10.00
Timeline
Official Publish:
January 4th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.