Local privilege escalation via writable scan folder

Incorrect permissions in the installer for Trend Micro HouseCall for Home Networks 5.3.1179 and earlier allow local users to escalate privileges. The installer creates product folders with permissions that let an attacker place arbitrary code where an administrator's scan will execute it. Exploitation requires prior low-privileged code execution and an administrator running a scan, resulting in arbitrary code execution with administrator rights.