HIGH
Code Injection into Bitdefender AV for Mac
Published Jan 29, 2020
7.8
HIGHCVSS 3.1
EPSS 0.41%
Description
A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution
Affected products
-
- Version unspecifiedStatusaffectedConstraints<8.0.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Bitdefender | Bitdefender Antivirus for Mac | n/a |
|
- < 8.0.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update the Antivirus for Mac solution to version 8.0.0 or higher.
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29004 Advisory
- https://www.bitdefender.com/support/security-advisories/code-injection-into-bitdefender-antivirus-for-mac-va-3441/ x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29004 | Advisory | |
| https://www.bitdefender.com/support/security-advisories/code-injection-into-bitdefender-antivirus-for-mac-va-3441/ | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Bitdefender
Published Jan 29, 2020
Updated Sep 17, 2024
Reserved Jan 28, 2020
Link CVE-2020-8093
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-29004 Assigner Bitdefender
Published Jan 29, 2020
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2020-29004