CVE-2006-6627: Buffer Overflow
First published: Mon Dec 18 2006(Updated: )
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow, aka the "cevakrnl.xmd vulnerability."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Softwin Bitdefender Online Scanner | ||
| Softwin Bitdefender | =isa_server | |
| Softwin Bitdefender | =ms_exchange_5.5 | |
| Softwin Bitdefender Antivirus | =plus | |
| Softwin Bitdefender Mail Protection | =enterprises | |
| Softwin Bitdefender | =ms_exchange_2003 | |
| Softwin Bitdefender Antivirus | ||
| Softwin Bitdefender | =ms_exchange_2000 | |
| Softwin Bitdefender Internet Security |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.bitdefender.com/KB323-en--cevakrnl.xmd-vulnerability.html
- http://www.securityfocus.com/bid/21610
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051319.html
- http://securitytracker.com/id?1017389
- http://secunia.com/advisories/23415
- http://securityreason.com/securityalert/2044
- http://www.vupen.com/english/advisories/2006/5040
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30904
- http://www.securityfocus.com/archive/1/454501/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/softwin
- canonical/softwin bitdefender online scanner
- canonical/softwin bitdefender
- version/softwin bitdefender/isa_server
- version/softwin bitdefender/ms_exchange_5.5
- canonical/softwin bitdefender antivirus
- version/softwin bitdefender antivirus/plus
- canonical/softwin bitdefender mail protection
- version/softwin bitdefender mail protection/enterprises
- version/softwin bitdefender/ms_exchange_2003
- version/softwin bitdefender/ms_exchange_2000
- canonical/softwin bitdefender internet security