CVE-2019-20000

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2019-12-26

Last modified

2024-08-05

Weaknesses

CWE-367

Affected products

• Premium Protection (Bullguard)

References

• https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/BullGuard/Privileged%20File%20Delete/v20.0.371.8/R…