CVE-2019-14242
Medium
Description
An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%\System32\ that will be executed with local user privileges.
SeverityMedium
CVSS6.7
Exploit probability—
ProductBitdefender Antivirus Plus
PublishedJul 30, 2019
First seenJul 30, 2019
How to fix
Update
- bitdefender antivirus_plus23.0.24.120 or later
- bitdefender endpoint_security_tool6.6.8.115 or later
- bitdefender internet_security23.0.24.120 or later
- bitdefender total_security23.0.24.120 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitdefender antivirus_plus | v < 23.0.24.120 | 23.0.24.120 |
| bitdefender endpoint_security_tool | v < 6.6.8.115 | 6.6.8.115 |
| bitdefender internet_security | v < 23.0.24.120 | 23.0.24.120 |
| bitdefender total_security | v < 23.0.24.120 | 23.0.24.120 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.