Symantec AV Engine CVE-2019-9698 Arbitrary File Deletion Vulnerability

Bugtraq ID:	108128
Class:	Design Error
CVE:	CVE-2019-9698
Remote:	No
Local:	Yes
Published:	May 08 2019 12:00AM
Updated:	May 08 2019 12:00AM
Credit:	RACK911 Labs.
Vulnerable:	Symantec AV Engine 13.0.8r8 Symantec AV Engine 13.0.7r6 Symantec AV Engine 13.0.6r28 Symantec AV Engine 13.0.6r20 Symantec AV Engine 13.0.6r16 Symantec AV Engine 13.0.5r50 Symantec AV Engine 13.0.2r26 Symantec AV Engine 13.0.1r22
Not Vulnerable:	Symantec AV Engine 13.0.9r17

Symantec AV Engine CVE-2019-9698 Arbitrary File Deletion Vulnerability

Symantec AV Engine is prone to an arbitrary-file-deletion vulnerability.

An attacker can exploit this issue to delete arbitrary files on a vulnerable system with the affected application.

Symantec AV Engine versions prior to 13.0.9r17 are vulnerable.

Symantec AV Engine CVE-2019-9698 Arbitrary File Deletion Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec AV Engine CVE-2019-9698 Arbitrary File Deletion Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec AV Engine CVE-2019-9698 Arbitrary File Deletion Vulnerability

References:

• Symantec Home Page (Symantec)