PT-2020-16202 · Trend Micro · Trend Micro Antivirus For Mac

Cees Elzinga · Published 2020-10-14 · Updated 2021-07-21 · CVE-2020-25778

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 (Consumer)

Description The issue allows an attacker to leak several bytes of memory by supplying a kernel pointer, but the attacker must first obtain the ability to execute high-privileged code on the target system.

Recommendations For Trend Micro Antivirus for Mac 2020 (Consumer), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2020-25778

ZDI-20-1241

Affected Products

Trend Micro Antivirus For Mac

References · 4

• https://zerodayinitiative.com/advisories/ZDI-20-1241 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25778 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/TMKA-09948 · Vendor Advisory