Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on the system to escalate their privileges. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
Link | Resource |
---|---|
https://www.zerodayinitiative.com/advisories/ZDI-20-1236/ | Third Party Advisory VDB Entry |
https://helpcenter.trendmicro.com/en-us/article/TMKA-09924 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-10-02 15:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-25776
Mitre link : CVE-2020-25776
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
trendmicro
- antivirus