Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total S...

CVE-2019-17100 · published 6 years ago
Summary

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.

What to do
  • Update bitdefender total_security_2020 to version 24.0.12.69 or later.
Affected software
VendorProductAffected versions
bitdefender total_security_2020 < 24.0.12.69
cpe:2.3:a:bitdefender:total_security_2020:*:*:*:*:*:*:*:*
Original advisory text
An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total S...
An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-426Untrusted Search Path
Timeline
Published27 Jan 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-17100 · NVD
Track software like this
Free during beta