KLA11367 Information disclosure vulnerability in CCleaner

Vulnerability related to writing the filenames to disk was found in CCleaner. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

CVE-2015-3999

Related products

CCleaner

CVE list

CVE-2015-3999 warning

Solution

Update to the latest version

CCleaner

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• CCleaner 3.26.0.1988 through 5.02.5101