Threat Encyclopedia

Security Vulnerability CVE-2020-24955 for SUPERAntiSpyware

description-logoDescription

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.

affected-products-logoAffected Products

SUPERAntiSpyware

CVE References

CVE-2020-24955