CVE-2019-17100 - Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)

Back Back to CVE browser

MEDIUM

Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)

Published Jan 27, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.

Affected products

Vendor Bitdefender Product Bdserviceshost.exe Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=24.0.12.69

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bitdefender

Bdserviceshost.exe

n/a

Version	Status	Constraints
unspecified	affected	<=24.0.12.69

Remediation

Vendor solution

Automatic update to Bitdefender Total Security version 24.0.12.69 mitigates the issue

Weaknesses (1)

CWE-426

References (1)

https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-bitdefender-total-security-2020-va-5895/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-bitdefender-total-security-2020-va-5895/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Bitdefender

Published Jan 27, 2020

Updated Sep 17, 2024

Reserved Oct 2, 2019

Link CVE-2019-17100

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-17100

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-17100