CVE Vulnerabilities

CVE-2020-8107

Published: Feb 18, 2022 | Modified: Feb 25, 2022
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

Affected Software

Name Vendor Start Version End Version
Antivirus_plus Bitdefender * 24.0.26.136 (excluding)
Internet_security Bitdefender * 24.0.26.136 (excluding)
Total_security Bitdefender * 24.0.26.136 (excluding)

References