Skip to content
Sign in
Not rated

CVE-2020-5755 Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against…

Description

Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to trigger a crash or wait upon Webroot service restart to rewrite and hijack dlls in this directory for privilege escalation.

Affected products and versions

Product Affected versions Fixed in
Webroot SecureAnywhere Versions not published

Other CVEs of Webroot SecureAnywhere

The 2 CVEs of Webroot SecureAnywhere →
CVE-2020-5754 Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability… Not rated
Track this CVE