PT-2020-18887 · Zonealarm · Zonealarm Anti-Ransomware

Published 2020-08-04 · Updated 2023-01-31 · CVE-2020-6012

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZoneAlarm Anti-Ransomware versions prior to 1.0.713

Description The issue allows a sophisticated timed attacker to replace files with malicious content, enabling an unprivileged user to escalate privileges via local access. This can be achieved by exploiting unpatched systems or using symbolic links.

Recommendations For versions prior to 1.0.713, update to version 1.0.713 or later to resolve the issue. As a temporary workaround, consider restricting access to the directory where files are copied for the report to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2020-6012

Affected Products

Zonealarm Anti-Ransomware

References · 5

• https://zonealarm.com/software/extreme-security/release-history · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6012 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6012 · Vendor Advisory
• https://zonealarm.com/anti-ransomware/release-history · Vendor Advisory
• https://danishcyberdefence.dk/blog/zonealarm-check-point · Note