A vulnerability in the free version of Bitdefender Antivirus could be exploited by attackers to gain system privileges on Windows.
These vulnerabilities (privilege escalation vulnerabilities) are used at a later stage of an attack, after the hacker has already compromised the victim's computer and needs elevated privileges to run malicious code as a power user.
The vulnerability is identified as CVE-2019-15295, and is due to a lack of verification of the binaries being loaded (that they are signed and come from a trusted location).
Peleg Hadar of SafeBreach Labs reports that the Bitdefender service (vsserv.exe) and the updater service (updatesrv.exe) were running as signed processes with SYSTEM privileges.
However, they were trying to load a non-existent DLL ('RestartWatchDog.dll') in the system path.
One of these locations is 'c:/python27,' which comes with an access control list (ACL) that is open to any user authenticated to the computer. This makes privilege escalation possible because a user with normal privileges could "write" the missing DLL and load it from the signed Bitdefender processes.
SafeBreach disclosed the vulnerability to Bitdefender on July 17, and it was patched by the security company on August 14.
On Monday, Bitdefender released an update for its Antivirus Free 2020 product. So if you use the app, it's a good idea to update immediately.
Let us remind you that iGuRu.gr, in collaboration with the company, offers 6 annual licenses for Bitdefender Total Security 2020, which can be used for 5 different devices.
_______________________
- Mercedes admits your car is tracking you
- View Leonardo da Vinci's notebook collection for free
- Windows 10 Notepad app is now available in the Microsoft Store
- Enable Ransomware protection in Windows Defender
- Bitdefender 2020 upgrades your security and privacy
- Avast 19.7 with Google Analytics tracking enabled
