Remote Code Execution Vulnerability in Bitdefender Internet Security 2018

CVE-2017-17410

What is CVE-2017-17410?

This vulnerability allows remote attackers to execute arbitrary code on targeted systems running Bitdefender Internet Security 2018. Exploitation requires user interaction, as a victim must either visit a malicious website or open a harmful file. The flaw stems from inadequate validation of user-supplied data within emulator 0x102 in cevakrnl.xmd, leading to potential writes beyond the limits of allocated memory. Successful exploitation could enable an attacker to execute code with SYSTEM-level privileges, posing significant threats to system integrity and security.

References