Remote Code Execution Vulnerability in Bitdefender Internet Security 2018
CVE-2017-17408

8.8HIGH

Key Information:

Vendor

Bitdefender

Status
Bitdefender Internet Security
Vendor
CVE Published:
21 December 2017
đź”” Create Bitdefender Vulnerability Alert

What is CVE-2017-17408?

A remote code execution vulnerability exists in Bitdefender Internet Security 2018 due to improper validation of user-supplied data within the cevakrnl.xmd component. This flaw can lead to an integer overflow, allowing attackers to execute arbitrary code on vulnerable systems. Exploitation requires user interaction, as the victim must visit a malicious webpage or open a compromised file to trigger the vulnerability. This defect poses significant risks to system integrity and data security.

Affected Version(s)

Bitdefender Internet Security 2018

References

https://zerodayinitiative.com/advisories/ZDI-17-942
x_refsource_MISC

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.