JVNDB-2020-009590

Trend Micro Security 2020 (Consumer) is vulnerable to arbitrary file deletion

Trend Micro Security 2020 (Consumer) provided by Trend Micro Incorporated contains an arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges.

Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solutions through JVN.

Trend Micro, Inc.

• Antivirus + Security 2020 for Windows v16 and earlier
• Internet Security 2020 for Windows v16 and earlier
• Trend Micro Maximum Security 2020 for Windows v16 and earlier
• Trend Micro Premium Security 2020 for Windows v16 and earlier

An attacker who can access the product may delete arbitrary files and/or folders.

[Apply the patch]
Apply the appropriate patch according to the information provided by the developer.
The patch that addresses this vulnerability is available and it is automatically applied through the product's automatic ActiveUpdate feature.

Trend Micro, Inc.

• Trend Micro : Trend Micro Security 2020 (Consumer) Security Race Condition Arbitrary File Deletion Vulnerability

1. Race Condition(CWE-362) [NVD Evaluation]

1. CVE-2020-25775

1. JVN : JVNVU#96249940
2. National Vulnerability Database (NVD) : CVE-2020-25775

• [2020/11/19]
    Web page was published