Vulnerabilities > Kaspersky LAB > Kaspersky Anti Virus Personal > 5.0.228

DATE CVE VULNERABILITY TITLE RISK
2009-12-29 CVE-2009-4452 Permissions, Privileges, and Access Controls vulnerability in Kaspersky LAB products
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.
local
low complexity
kaspersky-lab CWE-264
6.8
2005-06-09 CVE-2005-1905 Privilege Escalation vulnerability in Kaspersky LAB products
The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs.
local
low complexity
kaspersky-lab
7.2