cve/2020/CVE-2020-14990.md

CVE-2020-14990

Description

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.

POC

Reference

• https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html
• https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html
• https://github.com/Daniel-itsec/AdvancedSystemCare
• https://github.com/Daniel-itsec/AdvancedSystemCare

Github

• https://github.com/Daniel-itsec/AdvancedSystemCare