MicroWorld eScan Antivirus Incorrect Default Permissions Vulnerability Allowing Privilege Escalation and Denial-of-Service on Linux

A critical vulnerability exists in MicroWorld eScan Antivirus version 7.0.32 for Linux, specifically within the Installation Handler component. The issue arises from incorrect default permissions set during the installation process, which allows unprivileged users to modify files in the application's database directory. This flaw can lead to a denial-of-service condition by deleting the signatures database or to privilege escalation by overwriting engine libraries with malicious files.

Impact

Exploitation of this vulnerability can cause a denial-of-service by disrupting antivirus signature updates or allow for privilege escalation by manipulating application libraries.