PT-2020-9872 · Bitdefender · Bitdefender Total Security

Published 2020-01-27 · Updated 2020-02-04 · CVE-2019-17100

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions 24.0.12.69 and later

Description An Untrusted Search Path issue in bdserviceshost.exe allows an attacker to execute arbitrary code.

Recommendations For Bitdefender Total Security versions 24.0.12.69 and later, update to a version that contains a fix for this issue.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2019-17100

Affected Products

Bitdefender Total Security

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-17100 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17100 · Vendor Advisory
• https://bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-bitdefender-total-security-2020-va-5895 · Vendor Advisory