Buffer Overflow in Bitdefender Engines Affects User Experience

CVE-2018-18059

What is CVE-2018-18059?

A vulnerability exists in the rar.xmd parser of Bitdefender Engines prior to version 7.76675 due to insufficient validation of user-supplied data. This oversight can lead to a read past the end of an allocated buffer. Although user interaction is required to exploit this vulnerability—such as visiting a compromised website or opening a malicious file—it poses risks that could potentially result in a denial-of-service condition when combined with other vulnerabilities.

References