The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
| Software | From | Fixed in |
|---|---|---|
| mcafee / virusscan | 4.5 | 4.5.x |