CVE-2020-6012

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	ZoneAlarm Anti-Ransomware	before 1.0.713

References

https://danishcyberdefence.dk/blog/zonealarm-check-pointThird Party Advisory
https://www.zonealarm.com/anti-ransomware/release-historyRelease Notes, Vendor Advisory
https://www.zonealarm.com/software/extreme-security/release-historyRelease Notes, Vendor Advisory
https://danishcyberdefence.dk/blog/zonealarm-check-pointThird Party Advisory
https://www.zonealarm.com/anti-ransomware/release-historyRelease Notes, Vendor Advisory
https://www.zonealarm.com/software/extreme-security/release-historyRelease Notes, Vendor Advisory

Timeline

Published: Aug 4, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-60138.8ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute co CVE-2020-60146.5Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a CVE-2020-60155.5Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent th CVE-2020-60169.8Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_Receive CVE-2020-60179.8Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegment CVE-2020-60189.8Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decry CVE-2020-60197.5Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBa CVE-2020-60206.4Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 CVE-2020-60217.8Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repa CVE-2020-60225.5Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware.CVE-2020-60237.8Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware.CVE-2020-60247.8Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54