Vulnerability Details CVE-2019-14242
An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%\System32\ that will be executed with local user privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.5%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 7.2
References
Products affected by CVE-2019-14242
-
cpe:2.3:a:bitdefender:antivirus_plus:-
-
cpe:2.3:a:bitdefender:antivirus_plus:12.0
-
cpe:2.3:a:bitdefender:endpoint_security_tool:*
-
cpe:2.3:a:bitdefender:internet_security:-
-
cpe:2.3:a:bitdefender:internet_security:12.0
-
cpe:2.3:a:bitdefender:total_security:-
-
cpe:2.3:a:bitdefender:total_security:12.0
-
cpe:2.3:a:bitdefender:total_security:21.0.24.62
-
cpe:2.3:a:bitdefender:total_security:7.2.1.65
-
cpe:2.3:o:microsoft:windows:-