Installation of files with non-secure permissions in 2010 antivirus products

Situation

A vulnerability has been detected in the installation 2010 antivirus products which gives Total Control permissions over the program´s installation directory files.
 
Consequently, a local user without the necessary privileges could replace the files with malicious executable files and run arbitrary code with SYSTEM privileges.

Solution

To resolve the local privilege escalation problems reported by Maxim A. Kulakov, Panda Securitye has developed a serie of hotfixes. Follow the steps below to apply them:

1. Download the hotfix for your product.
   • Panda Global Protection 2010: hotfix hfgp30910s1_r7.exe (2.15 MB).
   • Panda Internet Security 2010: hotfix hfp150906s19_r1.exe (2.15 MB).
   • Panda Antivirus Pro 2010: hotfix hft90906s15_r1.exe (2.15 MB).
   • Panda Antivirus for Netbooks 2010: hotfix hft90906s15_r1.exe (2.15 MB).
2. Save the file to your hard disk; to the Windows Desktop, for example. 
3. Run the downloaded file. You can do this by double-clicking the file to apply the hotfix. 
4. Check that the incident has been resolved.