PT-2022-9063 · Bitdefender · Bitdefender Internet Security+2

김동현 · Published 2022-02-18 · Updated 2022-02-26 · CVE-2020-8107

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bitdefender Antivirus Plus versions prior to 24.0.26.136 Bitdefender Internet Security versions prior to 24.0.26.136 Bitdefender Total Security versions prior to 24.0.26.136

Description A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender products allows an attacker to tamper with product settings via a specially crafted DLL file.

Recommendations For Bitdefender Antivirus Plus versions prior to 24.0.26.136, update to version 24.0.26.136 or later. For Bitdefender Internet Security versions prior to 24.0.26.136, update to version 24.0.26.136 or later. For Bitdefender Total Security versions prior to 24.0.26.136, update to version 24.0.26.136 or later.

Fix

Weakness Enumeration

CWE-114

Related Identifiers

CVE-2020-8107

Affected Products

Bitdefender Antivirus Plus

Bitdefender Internet Security

Bitdefender Total Security

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-8107 · Security Note
• https://bitdefender.com/support/security-advisories/process-control-vulnerability-bitdefender-antivirus-plus-va-8709 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8107 · Vendor Advisory
• https://t.me/cvenotify/26988 · Telegram Post
• https://t.me/cvenotify/27413 · Telegram Post