total_security Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/total_security/ Sun, 26 Feb 2023 09:07:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png total_security Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/total_security/ 32 32 CVE-2007-5775 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-5775/ Sun, 26 Feb 2023 09:07:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-5775/ Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

The post CVE-2007-5775 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

The post CVE-2007-5775 appeared first on CVE Vulnerability.

]]> CVE-2018-6183 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6183/ Sun, 26 Feb 2023 06:50:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6183/ BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an “insecurely created named pipe”. Ensures full access to Everyone users group.

The post CVE-2018-6183 appeared first on CVE Vulnerability.

]]> BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an “insecurely created named pipe”. Ensures full access to Everyone users group.

The post CVE-2018-6183 appeared first on CVE Vulnerability.

]]> CVE-2020-8107 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8107/ Sun, 26 Feb 2023 06:43:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8107/ A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

The post CVE-2020-8107 appeared first on CVE Vulnerability.

]]> A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

The post CVE-2020-8107 appeared first on CVE Vulnerability.

]]> CVE-2020-15732 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-15732/ Sun, 26 Feb 2023 06:37:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-15732/ Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HSTS) checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender Internet Security versions prior to 25.0.7.29. Bitdefender Antivirus Plus versions prior to 25.0.7.29.

The post CVE-2020-15732 appeared first on CVE Vulnerability.

]]> Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HSTS) checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender Internet Security versions prior to 25.0.7.29. Bitdefender Antivirus Plus versions prior to 25.0.7.29.

The post CVE-2020-15732 appeared first on CVE Vulnerability.

]]> CVE-2019-14242 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14242/ Sun, 26 Feb 2023 06:30:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14242/ An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%System32 that will […]

The post CVE-2019-14242 appeared first on CVE Vulnerability.

]]> An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%System32 that will be executed with local user privileges.

The post CVE-2019-14242 appeared first on CVE Vulnerability.

]]> CVE-2021-4199 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4199/ Thu, 23 Feb 2023 14:12:09 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4199/ Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. […]

The post CVE-2021-4199 appeared first on CVE Vulnerability.

]]> Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.

The post CVE-2021-4199 appeared first on CVE Vulnerability.

]]> CVE-2021-4198 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4198/ Thu, 23 Feb 2023 14:12:08 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4198/ A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus […]

The post CVE-2021-4198 appeared first on CVE Vulnerability.

]]> A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48.

The post CVE-2021-4198 appeared first on CVE Vulnerability.

]]> CVE-2021-3576 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3576/ Thu, 23 Feb 2023 14:10:34 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3576/ Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to ‘NT AUTHORITYSystem. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client’s security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender […]

The post CVE-2021-3576 appeared first on CVE Vulnerability.

]]> Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to ‘NT AUTHORITYSystem. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client’s security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.

The post CVE-2021-3576 appeared first on CVE Vulnerability.

]]> CVE-2021-3579 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3579/ Thu, 23 Feb 2023 14:10:34 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3579/ Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITYSYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

The post CVE-2021-3579 appeared first on CVE Vulnerability.

]]> Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITYSYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

The post CVE-2021-3579 appeared first on CVE Vulnerability.

]]>