CVE-2020-5755 | BDVDB-2026-137367 Detail

Webroot SecureAnywhere

Description#

Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to trigger a crash or wait upon Webroot service restart to rewrite and hijack dlls in this directory for privilege escalation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.tenable.com/security/research/tra-2020-36

Exploit#

No public exploit known

History#

Version 12020-06-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.