Bitdefender ace.xmd parser out-of-bounds write (VA-8772)
CVE-2020-8109

5.9MEDIUM

Key Information:

Vendor

Bitdefender

Status
Bitdefender Engines
Vendor
CVE Published:
1 October 2020

What is CVE-2020-8109?

A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. This can result in denial-of-service. This issue affects: Bitdefender Engines version 7.84892 and prior versions.

Affected Version(s)

Bitdefender Engines <= 7.84892

References

https://www.bitdefender.com/support/security-advisories/b...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

David Lanzenberger
JSON
.