A vulnerability, which was classified as very critical, has been found in BitDefender Antivirus (Anti-Malware Software). Affected by this issue is an unknown code block. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability.

The weakness was shared 03/11/2013 by Felix Groebert with Google Security Team as not defined advisory (Website). The advisory is shared for download at google.com. The vendor cooperated in the coordination of the public release. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 03/21/2019).

Upgrading to version 7.46034 eliminates this vulnerability.

Productinfo

Type

• Anti-Malware Software

Vendor

• BitDefender

Name

• Antivirus

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion