Buffer Overflow Vulnerability in BitDefender Online Anti-Virus Scanner 8.0
CVE-2007-6189
Currently unrated
Key Information:
- Vendor
Bitdefender
- Vendor
- CVE Published:
- 30 November 2007
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 23%
What is CVE-2007-6189?
The BitDefender Online Anti-Virus Scanner 8.0 includes an ActiveX control vulnerable to a buffer overflow through the InitX method. Attackers can exploit this by sending a long argument starting with a '%%' sequence, which leads to improper memory management due to misinterpretation as a Unicode string. This flaw allows for arbitrary code execution, presenting serious security risks to affected systems.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.