|
BitDefender Insecure Program Execution Vulnerability
|
|
Secunia Advisory:
|
SA15076
|
|
|
Release Date:
|
2005-04-26
|
|
Last Update:
|
2005-05-02
|
|
Popularity:
|
6,457 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
Privilege escalation
DoS
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Workaround
|
|
| Software: | BitDefender Antivirus Professional Plus 8.x
BitDefender Antivirus Standard 8.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
fRoGGz has reported a vulnerability in BitDefender, which can be exploited by malicious, local users to disable the virus protection or gain escalated privileges.
During installation, the installation process creates entries in the "Run" registry key to automatically run some programs when a user logs in. However, these entries are created insecurely and can be exploited to prevent the virus protection from starting up or execute arbitrary code with the privileges of another user logging in by placing a file with a specially crafted name in the application path.
Successful exploitation requires that the application has been installed in a non-default location with a directory name in the path containing a white space character and that an unprivileged user can create a specially named file in this path.
NOTE: This is not considered an issue in a default install, as only administrative users can create the file "C:\program.exe" on supported and fully updated versions of Windows.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
