CVE-2020-6013

Published: Jul 6, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems.

Affected (1)

Products: Checkpoint: Zonealarm Extreme Security

1 product

Zonealarm Extreme Security

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Zonealarm Extreme Security	Before 15.8.109.18436

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Windows Hard Link

The product, when opening a file or directory, does not sufficiently handle when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

References (2)

https://www.zonealarm.com/software/extreme-security/release-history

Source: cve@checkpoint.com

Release NotesVendor Advisory

https://www.zonealarm.com/software/extreme-security/release-history

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.