CVE-2005-2940 Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the progr...
HighCVSS 7.2
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs (1) GIANTAntiSpywareMain.exe, (2) gcASNotice.exe, (3) gcasServ.exe, (4) gcasSWUpdater.exe, or (5) GIANTAntiSpywareUpdater.exe. NOTE: it is not clear whether this overlaps CVE-2005-2935.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft antispyware | = 1.0.509 | No fix listed |
References
- 1015226 vdb-entry
- 20051115 Multiple Vendor Insecure Call to CreateProcess() Vulnerability third-party-advisory vendor-advisory
- 15448 vdb-entry