$ cve CVE-2009-4452 JSON

CVE-2009-4452 EXPLOIT

6.8

MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 56)

Patch early

A public exploit exists.

Description

Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.

Scoring

CVSS	6.8 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:S/C:C/I:C/A:C
EPSS	0.82% — more likely to be exploited than 56% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	yes
Published	2009-12-29
Last modified	2026-06-16

Affected (7)

Vendor	Product
kaspersky lab	kaspersky anti-virus
kaspersky lab	kaspersky anti-virus 2009
kaspersky lab	kaspersky anti-virus 2010
kaspersky lab	kaspersky anti-virus personal
kaspersky lab	kaspersky internet security
kaspersky lab	kaspersky internet security 2009
kaspersky lab	kaspersky internet security 2010

Public exploits

Source	Title	Date
exploit-db	Kaspersky Lab (Multiple Products) - Local Privilege Escalation	2009-12-16

References

→ the Explorer · watch your stack · NVD