CVE-2020-8103

CVE-2020-8103 concerns Bitdefender Antivirus Free where improper handling of symbolic links in quarantined files allows an unprivileged user to substitute a quarantined file and restore it to a privileged location. Affected versions are prior to 1.0.17.178. The vulnerability is tracked across mul...

CVE-2020-8094

The CVE-2020-8094 entry concerns Bitdefender Antivirus Free 2020. The vulnerability is an untrusted search path issue in testinitsigs.exe , which can be exploited by a local attacker to achieve code execution as SYSTEM via a specially crafted DLL. The root cause is a vulnerable search-path handli...

CVE-2019-15295

CVE-2019-15295 concerns an Untrusted Search Path vulnerability in the Bitdefender Antivirus Free 2020 product. Affected component: ServiceInstance.dll (versions 1.0.15.119 and earlier) used by Bitdefender Antivirus Free 2020 prior to 1.0.15.138. Root cause: loading an arbitrary DLL from the searc...

CVE-2020-8099

Bitdefender Antivirus Free contains a vulnerability due to improper handling of junctions that could let an unprivileged user substitute a quarantined file and then restore it to a privileged location. Affected versions are Bitdefender Antivirus Free prior to 1.0.17. The description in the connec...