CVE-2020-8096: Untrusted Search Path Vulnerability in High-Level Antimalware SDK
First published: Tue Apr 07 2020(Updated: )
Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204 .
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Antimalware Software Development Kit | <3.0.1.204 |
Remedy
An updated version of the High-Level Antimalware SDK for Windows (version 3.0.1.204, delivered ion August 30, 219) fixes the issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-8096.
What is the title of this vulnerability?
The title of this vulnerability is Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows.
What is the severity of CVE-2020-8096?
The severity of CVE-2020-8096 is medium, with a severity value of 5.3.
Which software versions are affected by CVE-2020-8096?
Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204 are affected by CVE-2020-8096.
How can an attacker exploit the vulnerability?
An attacker can exploit the vulnerability by loading third party code from a DLL library in the search path.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/remedy
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/tags
- vendor/bitdefender
- canonical/bitdefender antimalware software development kit