bitdefender Archives - CVE Vulnerability

CVE-2008-6661

Sun, 26 Feb 2023 09:11:38 +0000

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file.

The post CVE-2008-6661 appeared first on CVE Vulnerability.

CVE-2007-5775

Sun, 26 Feb 2023 09:07:51 +0000

Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

The post CVE-2007-5775 appeared first on CVE Vulnerability.

CVE-2018-6183

Sun, 26 Feb 2023 06:50:37 +0000

BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an “insecurely created named pipe”. Ensures full access to Everyone users group.

The post CVE-2018-6183 appeared first on CVE Vulnerability.

CVE-2020-8107

Sun, 26 Feb 2023 06:43:16 +0000

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

The post CVE-2020-8107 appeared first on CVE Vulnerability.

CVE-2020-15732

Sun, 26 Feb 2023 06:37:57 +0000

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HSTS) checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender Internet Security versions prior to 25.0.7.29. Bitdefender Antivirus Plus versions prior to 25.0.7.29.

The post CVE-2020-15732 appeared first on CVE Vulnerability.

CVE-2020-15733

Sun, 26 Feb 2023 06:37:57 +0000

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.

The post CVE-2020-15733 appeared first on CVE Vulnerability.

CVE-2019-17095

Sun, 26 Feb 2023 06:31:27 +0000

A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the production firmware URL supplied by remote servers, leading to arbitrary execution of system commands. In order to exploit the condition, an unauthenticated attacker should impersonate a infrastructure server to trigger this vulnerability.

The post CVE-2019-17095 appeared first on CVE Vulnerability.

CVE-2019-17102

Sun, 26 Feb 2023 06:31:27 +0000

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method `/api/update_setup` does not perform firmware signature checks atomically, leading to an exploitable race condition (TOCTTOU) that allows arbitrary execution of system commands. This issue affects: Bitdefender Bitdefender BOX 2 versions prior to 2.1.47.36.

The post CVE-2019-17102 appeared first on CVE Vulnerability.

CVE-2019-14242

Sun, 26 Feb 2023 06:30:30 +0000

An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%System32 that will be executed with local user privileges.

The post CVE-2019-14242 appeared first on CVE Vulnerability.

CVE-2019-12611

Sun, 26 Feb 2023 06:29:56 +0000

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or to trigger a device reboot.

The post CVE-2019-12611 appeared first on CVE Vulnerability.