New Flaws in Top Antivirus Software Could Make Computers More Vulnerable

🗓️ 05 Oct 2020 14:04:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 10 Views

Flaws in popular antivirus products enable privilege escalation via file manipulation.

Reporter	Title	Published	Views	Family All 112
zdt	CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation Vulnerability	7 Oct 201900:00	–	zdt
ATTACKERKB	CVE-2020-7310	21 Aug 202009:15	–	attackerkb
ATTACKERKB	CVE-2020-7250	14 Apr 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-9290	15 Mar 202022:15	–	attackerkb
BDU FSTEC	The vulnerability of the MpSigStub.exe executable of Microsoft’s security tool (Windows Defender) allows a hacker to delete files in certain parts of the file system.	27 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of Cisco Webex Meetings Server’s software for web conferencing allows a hacker to redirect users to a malicious website.	10 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of clients of Check Point Endpoint Security’s comprehensive network endpoint protection solution, specifically for Windows and ZoneAlarm firewalls, stems from permission handling errors. This allows attackers to escalate their privileges.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the installation file of the Kaspersky VPN Secure Connection antivirus software allows a hacker to delete any files in the system.	31 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Kaspersky Virus Removal Tool’s antivirus protection mechanism, related to deficiencies in access control, allows a malicious user to delete any file in the system.	31 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the installation file of the Kaspersky Security Center Web Console allows a perpetrator to increase their privileges.	31 Jul 202000:00	–	bdu_fstec

06 Oct 2020 18:02Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26.9

CVSS 3.17.8 - 8.2

CVSS 34.3

EPSS0.01069

SSVC

Kaspersky McAfee Symantec Fortinet Check Point Trend Micro Avira Microsoft Defender Program Data Privilege escalation File manipulation