CVE-2019-13357

Name of the Vulnerable Software and Affected Versions Total Defense Anti-virus version 9.0.0.773

Description The issue allows local attackers to achieve SYSTEM-level code execution by hijacking the ccGUIFrm.dll when the caschelp.exe executable, which uses the untrusted search path C:, is run by the ccSchedulerSVC service.

Recommendations For Total Defense Anti-virus version 9.0.0.773, consider restricting access to the ccGUIFrm.dll until a patch is available to prevent code execution. Additionally, ensure the ccSchedulerSVC service is properly configured to minimize the risk of exploitation.