title: Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)
description: An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.
problem types: CWE-426 Untrusted Search Path
affected:
{
product: bdserviceshost.exe
vendor: Bitdefender
versions:
lessThanOrEqual: 24.0.12.69, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.2
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
version: 3.1
]
solutions: Automatic update to Bitdefender Total Security version 24.0.12.69 mitigates the issue