Unscored CVE-2019-20000 EUVD-2019-10557GHSA-9238-pwgr-pmp5

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privi…

Published Dec 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted.

References

https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/BullGuard/Privileged%20File%20Delete/v20.0.371.8/README.md