CVE-2017-10950 Use after free in Bitdefender Total Security
Local attackers can execute arbitrary code with SYSTEM privileges via a use-after-free flaw in the Bitdefender Total Security driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-10950?
CVE-2017-10950 is a high-severity use after free vulnerability in Zero Day Initiative Bitdefender Total Security, published on 29 Aug 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of the 0x8000E038 IOCTL in the bdfwfpf driver. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker could leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4776.
Weakness: CWE-415
Which versions are affected by CVE-2017-10950?
It affects 1 product.
Products include Bitdefender Total Security.
How do I fix CVE-2017-10950?
No fix has been published for CVE-2017-10950 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2017-10950 being exploited?
There is no known exploitation of CVE-2017-10950 in the wild and no public exploit code.
Other vulnerabilities in Zero Day Initiative Bitdefender Total Security
- CVE-2023-49567 Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)
- CVE-2023-49570 Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)
- CVE-2023-6055 Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)
- CVE-2023-6056 Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
- CVE-2023-6057 Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)
Sources
Also known as GHSA-xwq3-8g6q-rq5g.