Process Control vulnerability in Bitdefender Antivirus Plus
CVE-2020-8107

8.2HIGH

Key Information:

Vendor

Bitdefender

Status
Antivirus Plus
Internet Security
Total Security
Vendor
CVE Published:
18 February 2022
🔔 Create Bitdefender Vulnerability Alert

What is CVE-2020-8107?

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

Affected Version(s)

Antivirus Plus < 24.0.26.136

Internet Security < 24.0.26.136

Total Security < 24.0.26.136

References

https://www.bitdefender.com/support/security-advisories/p...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

김동현 - dsu.kr
.