CVE-2020-6012: High severity zonealarm by check point vulnerability
ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for ZoneAlarm Anti-Ransomware?
The vulnerability ID for ZoneAlarm Anti-Ransomware is CVE-2020-6012.
What is the severity of CVE-2020-6012?
The severity of CVE-2020-6012 is high (7.4).
How does CVE-2020-6012 affect ZoneAlarm Anti-Ransomware?
CVE-2020-6012 allows a sophisticated attacker to replace files used for reports with malicious or linked content.
Which version of ZoneAlarm Anti-Ransomware is affected by CVE-2020-6012?
ZoneAlarm Anti-Ransomware before version 1.0.713 is affected by CVE-2020-6012.
How can I fix CVE-2020-6012 in ZoneAlarm Anti-Ransomware?
To fix CVE-2020-6012 in ZoneAlarm Anti-Ransomware, update to version 1.0.713 or later.