CVE-2007-4649

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-31 · updated 2026-06-16
Weakness: CWE-264

Description

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.

Affected products

MicroWorld Technologies Escan Anti-Virus: 9.0.722.1
MicroWorld Technologies Escan Internet Security: 9.0.722.1
MicroWorld Technologies Escan Virus Control: 9.0.722.1

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065509.html
http://secunia.com/advisories/26581
http://securityreason.com/securityalert/3085
http://www.securityfocus.com/bid/25493
https://exchange.xforce.ibmcloud.com/vulnerabilities/36367
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065509.html
http://secunia.com/advisories/26581
http://securityreason.com/securityalert/3085
http://www.securityfocus.com/bid/25493
https://exchange.xforce.ibmcloud.com/vulnerabilities/36367

Get alerted when CVE-2007-4649 or the next vulnerability affects your stack