Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-17099 EUVD-2019-7565GHSA-6g5g-jj2r-p5fv

Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)

Published Jan 27, 2020 · Updated Sep 16, 2024 · Assigned by Bitdefender

Description

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163.

Affected products

VendorProductAffectedFixed
Bitdefender EPSecurityService.exe 6.6.11.162 and prior —

References