CVE-2018-8955

CVE-2018-8955 affects the BitDefender GravityZone installer. The root cause is that the installer relies on an encoded string in a filename to determine the URL for installation metadata, allowing a remote attacker to execute arbitrary code by changing the filename while the file’s digital signat...