Code Injection into Bitdefender AV for Mac
CVE-2020-8093

5.3MEDIUM

Key Information:

Vendor: Bitdefender
Status: Bitdefender Antivirus For Mac
Vendor: CVE Published:; 30 January 2020

🔔 Create Bitdefender Vulnerability Alert

What is CVE-2020-8093?

A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution

Affected Version(s)

Bitdefender Antivirus for Mac < 8.0.0

References

https://www.bitdefender.com/support/security-advisories/c...

x_refsource_MISC

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jan 30, 2020
Vulnerability Reserved
Jan 28, 2020

Credit

Bugcrowd user Bohops

JSON