CVE-2019-13356

概要

参考情報

• NtRaiseHardError/Antimalware-Research · Exploit
• totaldefense.com/security-blog · Vendor Advisory

anti-virus のその他の脆弱性

• CVE-2019-18645中 5.5The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be writt…
• CVE-2019-18644中 5.9The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow pri…
• CVE-2019-13357高 7.8In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschelp.exe allows local attackers t…
• CVE-2019-13355高 7.8In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\ used by ccschedu…