Code Injection into Bitdefender AV for Mac
CVE-2020-8093

5.3MEDIUM

Key Information:

Vendor

Bitdefender

Status
Bitdefender Antivirus For Mac
Vendor
CVE Published:
30 January 2020
đź”” Create Bitdefender Vulnerability Alert

What is CVE-2020-8093?

A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution

Affected Version(s)

Bitdefender Antivirus for Mac < 8.0.0

References

https://www.bitdefender.com/support/security-advisories/c...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bugcrowd user Bohops
.