Remote Code Execution Vulnerability in Bitdefender Internet Security 2018

CVE-2017-17409

What is CVE-2017-17409?

This vulnerability permits remote attackers to execute arbitrary code on susceptible installations of Bitdefender Internet Security 2018. Exploitation of this flaw necessitates user interaction, as the target user must either visit a malicious webpage or open a harmful file. The root cause of this vulnerability can be traced to faulty validation of user-supplied data within the emulator 0x10A of the cevakrnl.xmd module, leading to an integer overflow that occurs prior to memory writes. A successful exploit allows an attacker to execute code with SYSTEM privileges, posing significant risks to system integrity.

References