CVE-2019-20358

Summary: Trend Micro Anti-Threat Toolkit (ATTK) is affected by CVE-2019-20358 and CVE-2019-9491. Affected products are ATTK versions 1.62.0.1218 and earlier. Root cause involves the ability for an attacker to place malicious files in the same directory as the ATTK executable, potentially enabling...

CVE-2019-20358

Trend Micro Anti-Threat Toolkit ATTK versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution RCE when executed. Another attack vector similar to CVE-2019-9491 was idenitfi...