The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spy_sweeper_enterprise | Webroot_software | 1.5.1_build_3698 (including) | 1.5.1_build_3698 (including) |
References
- http://secunia.com/advisories/13187
- http://secunia.com/secunia_research/2004-14/advisory/
- http://securitytracker.com/id?1012652
- http://www.osvdb.org/12534
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18628
- http://secunia.com/advisories/13187
- http://secunia.com/secunia_research/2004-14/advisory/
- http://securitytracker.com/id?1012652
- http://www.osvdb.org/12534
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18628