CVE-2005-2298: Medium severity Softwin Bitdefender Engine vulnerability
BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2298?
CVE-2005-2298 is considered a moderate severity vulnerability due to its potential to allow remote attackers to bypass virus scanning.
How do I fix CVE-2005-2298?
To mitigate CVE-2005-2298, upgrade the BitDefender Engine to a version later than 1.6.1, as the vulnerability has been resolved in subsequent releases.
What does CVE-2005-2298 exploit?
CVE-2005-2298 exploits a flaw in BitDefender Engine's handling of email attachments, allowing attackers to bypass scanning by using specific commands.
Which versions of BitDefender Engine are affected by CVE-2005-2298?
CVE-2005-2298 affects BitDefender Engine versions up to and including 1.6.1.
What impact does CVE-2005-2298 have on users?
The impact of CVE-2005-2298 on users is that malicious email attachments may go undetected, increasing the risk of malware infection.