12 matches found
CVE-2020-25289
The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...
CVE-2020-25289
The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...
CVE-2020-25289
The CVE-2020-25289 entry describes a local file-write vulnerability in the Avast SecureLine VPN service (pre-5.6.4982.470). The issue arises from an Object Manager symbolic link in the log directory that has weak permissions, allowing local users to write to arbitrary files. Some sources corrobor...
CVE-2020-25289: Improper Link Resolution Before File Access
The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...
PT-2020-16067
Name of the Vulnerable Software and Affected Versions AVAST SecureLine versions prior to 5.6.4982.470 Description The issue allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory, which has weak permissions. Recommendations For versions prior to...
CVE-2020-15401
IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...
CVE-2020-15401
IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...
PT-2020-14411
Name of the Vulnerable Software and Affected Versions IOBit Malware Fighter Pro version 8.0.2.547 Description The issue allows local users to gain privileges for file deletion by manipulating malicious flagged file locations. This is achieved through the use of an NTFS junction and an Object...
CVE-2020-14990
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...
Arbitrary file deletion
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...
CVE-2020-14990: Improper Link Resolution Before File Access
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...
PT-2020-14108
Name of the Vulnerable Software and Affected Versions IOBit Advanced SystemCare Free version 13.5.0.263 Description The issue allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature. This is achieved through the use of an NTFS junction and an Object...