CVE-2009-4556: Quickheal Antivirus Plus 2009

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs, as demonstrated by replacing quhlpsvc.exe.

Affected products

• Quickheal Antivirus Plus 2009: version 10.00 only
• Quickheal Total Security 2009: version 10.00 only

Published 2010-01-04. Last modified 2026-06-16.