CVE-2019-8453CWE-114

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions

published April 17, 2019

CVSS
—
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.8th percentile
Weakness
CWE-114 · Process Control
Published
2019-04-17T14:06Z
EPSS history
Timeline
  • 17 APR 14:06Z
    Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions
    cvelistv5