Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-6012

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malic

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
checkpoint

Description

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a ZoneAlarm Anti-Ransomware

  • before 1.0.713affected

References