The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse common.exe program in the C:Program Files directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virusscan | Mcafee | 4.5 (including) | 4.5 (including) |