Local privilege escalation via symbolic-link file deletion

Local privilege escalation in Qihoo 360 Total Security 11.0.0.1061 and earlier allows local users to delete arbitrary files. The privileged antivirus file-deletion path follows an attacker-created symbolic link instead of confining deletion to its intended target. A local user must place the link on a Windows host and trigger the antivirus deletion operation; removal of a protected file enables privilege escalation.