Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.
Description: CWE-732 Incorrect Permission Assignment for Critical Resource
Metrics
Version
Base score
Base severity
Vector
3.1
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Version:3.1
Base score:7.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
An automatic update to the following product versions fixes the issue:
- Bitdefender Total Security version 26.0.10.45.
- Bitdefender Internet Security version 26.0.10.45.
- Bitdefender Antivirus Plus version 26.0.10.45.
- Bitdefender Endpoint Security Tools for Windows version 7.4.3.146.
Configurations
Workarounds
Exploits
Credits
Michael DePlante (@izobashi) of Trend Micro Zero Day Initiative