Administrator code execution via writable installer folders

Incorrect permissions in Trend Micro HouseCall for Home Networks 5.3.1179 and earlier allow local users to gain administrator privileges. The installer creates product folders with permissions that let low-privileged code place arbitrary code where an administrator-initiated scan executes it. Exploitation requires existing low-privileged code execution and an administrator to run a scan, after which the planted code runs with administrator rights.