CVE-2004-2676

CVE-2004-2676 describes a privilege escalation vulnerability in WebRoot Spy Sweeper Enterprise Client (SpySweeperTray.exe) versions prior to 2.0. This flaw allows a local attacker to gain elevated privileges by exploiting the help functionality, which fails to properly drop privileges. With a CVSS score of 7.2, this vulnerability is considered high severity due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or KEV entry, the vulnerability has garnered significant community discussion with 10 mentions.