CVE-2017-10950

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security version 21.0.24.62

Description This issue allows local attackers to execute arbitrary code on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the processing of the 0x8000E038 IOCTL in the bdfwfpf driver, resulting from the lack of validating the existence of an object prior to performing operations on it. An attacker could leverage this to execute arbitrary code in the context of SYSTEM.

Recommendations For Bitdefender Total Security version 21.0.24.62, at the moment, there is no information about a newer version that contains a fix for this vulnerability.