CVE-2020-6012
N/A
N/A
Summary
ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | ZoneAlarm Anti-Ransomware | before 1.0.713 | affected |
Weaknesses
- CWE-59: CWE-59: Improper Link Resolution Before File Access ('Link Following')
ADP Enrichment
CVE Program Container
Additional References
- https://www.zonealarm.com/software/extreme-security/release-history
- https://www.zonealarm.com/anti-ransomware/release-history
- https://danishcyberdefence.dk/blog/zonealarm-check-point
References
- https://www.zonealarm.com/software/extreme-security/release-history
- https://www.zonealarm.com/anti-ransomware/release-history
- https://danishcyberdefence.dk/blog/zonealarm-check-point
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.