CVE-2019-13356

Publication date

2019-09-24 14:09:04

Family

mitre

State

PUBLISHED

Description

In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%TotalDefenseConsumerISS9bdTDUpdate2 used by AMRT.exe allows local attackers to hijack bdcore.dll, which leads to privilege escalation when the AMRT service loads the DLL.