MEDIUM
Untrusted Search Path Vulnerability in High-Level Antimalware SDK
Published Apr 7, 2020
6.3
MEDIUMCVSS 3.1
EPSS 0.28%
Description
Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204 .
Affected products
-
- Version unspecifiedStatusaffectedConstraints<3.0.1.204
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Bitdefender | High-Level Antimalware SDK for Windows | n/a |
|
- < 3.0.1.204
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
An updated version of the High-Level Antimalware SDK for Windows (version 3.0.1.204, delivered ion August 30, 219) fixes the issue.
Weaknesses (1)
References (1)
- https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-high-level-antimalware-sdk-windows/ x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-high-level-antimalware-sdk-windows/ | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Bitdefender
Published Apr 7, 2020
Updated Sep 16, 2024
Reserved Jan 28, 2020
Link CVE-2020-8096
CISA Vulnrichment
Updated n/a