CVE-2019-18194: High severity totalav vulnerability

Published Jan 10, 2020

Updated

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder.

Affected Software

1 affected component

TotalAV TotalAV 2020=4.14.31

Event History

Jan 10, 2020

CVE Published

via MITRE·05:26 PM

Data Sourced

via MITRE·05:26 PM

Description

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs local access to the affected system, but no privileges are required beforehand. Exploitation also requires user interaction, according to the CVSS vector.

What is the impact if exploitation succeeds?

An attacker can escalate privileges by using an NTFS directory junction to cause a malicious DLL to be restored from quarantine into the system32 folder. The CVSS assessment indicates high impact to confidentiality, integrity, and availability.

Which product version is identified as affected?

The reported affected version is TotalAV 2020 4.14.31.

CVE-2019-18194: High severity totalav vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the impact if exploitation succeeds?

Which product version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the impact if exploitation succeeds?

Which product version is identified as affected?