A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48.
References
| Link | Resource |
|---|---|
| https://www.bitdefender.com/support/security-advisories/messaging_ipc-dll-null-pointer-dereference-in-multiple-bitdefender-products-va-10016/ | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-22-483/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Mar 2022, 19:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| References | (CONFIRM) https://www.bitdefender.com/support/security-advisories/messaging_ipc-dll-null-pointer-dereference-in-multiple-bitdefender-products-va-10016/ - Vendor Advisory | |
| References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-22-483/ - Third Party Advisory | |
| First Time |
Bitdefender endpoint Security Tools
Bitdefender vpn Standalone Bitdefender antivirus Plus Bitdefender total Security Bitdefender Bitdefender internet Security |
|
| CPE | cpe:2.3:a:bitdefender:vpn_standalone:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:internet_security:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:antivirus_plus:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 3.6
v3 : 6.1 |
10 Mar 2022, 17:44
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48. |
07 Mar 2022, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-07 12:15
Updated : 2023-12-10 14:22
NVD link : CVE-2021-4198
Mitre link : CVE-2021-4198
CVE.ORG link : CVE-2021-4198
JSON object : View
Products Affected
bitdefender
- total_security
- vpn_standalone
- endpoint_security_tools
- antivirus_plus
- internet_security
CWE
CWE-476
NULL Pointer Dereference