CVE-2020-25779: Low severity trend micro antivirus for mac vulnerability

Published Oct 13, 2020

Updated

Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature.

Affected Software

1 affected component

trendmicro Antivirus Macos=2020

Remediation

Patch Available

https://helpcenter.trendmicro.com/en-us/article/TMKA-09949

Event History

Oct 13, 2020

CVE Published

via MITRE·03:45 PM

Data Sourced

via MITRE·03:45 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-25779?

CVE-2020-25779 is a vulnerability in Trend Micro Antivirus for Mac 2020 that allows a Internationalized Domain Name homograph attack to bypass web threat protection.

What is the severity of CVE-2020-25779?

The severity of CVE-2020-25779 is low with a severity value of 3.3.

How does the vulnerability in Trend Micro Antivirus for Mac 2020 (CVE-2020-25779) work?

The vulnerability allows an attacker to use a Puny-code attack to add a malicious website to the approved websites list, bypassing the web threat protection feature.

How can I protect myself from CVE-2020-25779?

Update your Trend Micro Antivirus for Mac 2020 to the latest version to fix CVE-2020-25779 and prevent the vulnerability from being exploited.

Where can I find more information about CVE-2020-25779?

You can find more information about CVE-2020-25779 on the Trend Micro Help Center website.