Softwin » Bitdefender Mail Protection : Security Vulnerabilities, CVEs,
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow, aka the "cevakrnl.xmd vulnerability."
Max CVSS
10.0
EPSS Score
15.23%
Published
2006-12-18
Updated
2018-10-17
BitDefender Mail Protection for SMB 2.0 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.
Max CVSS
5.0
EPSS Score
0.41%
Published
2006-12-10
Updated
2018-10-17
2 vulnerabilities found