A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.
The product checks the state of a resource before using that resource, but the resource’s state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Advanced_malware_protection | Cisco | * | 7.2.13 (excluding) |
| Madcodehook | Madshi | * | 4.1.3 (excluding) |
| Unified_threat_prevention_platform | Morphisec | * | 3.5.9 (excluding) |
| Unified_threat_prevention_platform | Morphisec | 4.0 (including) | 4.1.2 (excluding) |