CVE-2019-18644

The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow privileged files to be deleted.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2019-10-31

Last modified

2024-08-05

Weaknesses

CWE-367

Affected products

• Anti-virus (Totaldefense)

References

• https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/Total%20Defense/Privileged%20File%20Delete/v11.5.2…