CVE-2009-4556

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-01-04 · updated 2026-06-16
Weakness: CWE-264

Description

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.

Affected products

Quickheal Antivirus Plus 2009: 10.00-sp1
Quickheal Total Security 2009: 10.00-sp1

References

http://secunia.com/advisories/37033
http://www.securityfocus.com/archive/1/507121/100/0/threaded
http://www.securityfocus.com/bid/36662
https://exchange.xforce.ibmcloud.com/vulnerabilities/53746
http://secunia.com/advisories/37033
http://www.securityfocus.com/archive/1/507121/100/0/threaded
http://www.securityfocus.com/bid/36662
https://exchange.xforce.ibmcloud.com/vulnerabilities/53746

Get alerted when CVE-2009-4556 or the next vulnerability affects your stack