PT-2019-15547 · Total Defense · Total Defense Anti-Virus
Ntraiseharderror
·
Publicado
2019-10-30
·
Atualizado
2019-11-01
·
CVE-2019-18644
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Total Defense Anti-virus version 11.5.2.28
Description
The issue concerns a TOCTOU bug in the malware scan function, which can be exploited through symbolic link attacks to delete privileged files.
Recommendations
For Total Defense Anti-virus version 11.5.2.28, consider disabling the malware scan function until a patch is available to prevent potential exploitation.
Exploit
Correção
Time Of Check To Time Of Use
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Total Defense Anti-Virus