Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-3660
http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities