CVE-2019-17100: Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)
First published: Thu Dec 19 2019(Updated: )
An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Total Security 2020 | <24.0.12.69 |
Remedy
Automatic update to Bitdefender Total Security version 24.0.12.69 mitigates the issue
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-17100?
CVE-2019-17100 is an Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020.
How does CVE-2019-17100 work?
CVE-2019-17100 allows an attacker to execute arbitrary code by exploiting an Untrusted Search Path vulnerability in bdserviceshost.exe.
Which software versions are affected by CVE-2019-17100?
Bitdefender Total Security 2020 versions prior to 24.0.12.69 are affected by CVE-2019-17100.
What is the severity of CVE-2019-17100?
CVE-2019-17100 has a severity rating of medium, with a score of 6.5.
How do I fix CVE-2019-17100?
To fix CVE-2019-17100, update Bitdefender Total Security 2020 to version 24.0.12.69 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/title
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/tags
- vendor/bitdefender
- canonical/bitdefender total security 2020