CVE-2008-5409: Buffer Overflow
First published: Tue Dec 09 2008(Updated: )
Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Antivirus for macOS | =10-_nil_ | |
| Bitdefender | =10-_nil_ | |
| BullGuard Internet Security | =8.5 | |
| Software602 Groupware Server | =6.0.08.1118 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://milw0rm.com/sploits/2008-BitDefenderDOS.zip
- http://osvdb.org/50010
- http://osvdb.org/50103
- http://osvdb.org/50205
- http://secunia.com/advisories/27805
- http://secunia.com/advisories/32789
- http://secunia.com/advisories/32814
- http://www.securityfocus.com/bid/32396
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46750
- https://www.exploit-db.com/exploits/7178
Frequently Asked Questions
What is the severity of CVE-2008-5409?
CVE-2008-5409 is classified as a denial of service vulnerability allowing attackers to crash the application.
How do I fix CVE-2008-5409?
To fix CVE-2008-5409, update to the latest version of the affected software or apply any available patches.
Which software is affected by CVE-2008-5409?
CVE-2008-5409 affects BitDefender Free Edition 10, BitDefender Antivirus Standard 10, BullGuard Internet Security 8.5, and Software602 Groupware Server 6.0.08.1118.
Can CVE-2008-5409 allow for arbitrary code execution?
CVE-2008-5409 may potentially allow for arbitrary code execution alongside causing a denial of service.
What should I do if I suspect my system is vulnerable to CVE-2008-5409?
If you suspect your system is vulnerable to CVE-2008-5409, immediately update the affected software and monitor for any unusual activity.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/bitdefender
- canonical/bitdefender antivirus for macos
- version/bitdefender antivirus for macos/10-_nil_
- canonical/bitdefender
- version/bitdefender/10-_nil_
- vendor/bullguard
- canonical/bullguard internet security
- version/bullguard internet security/8.5
- vendor/software602
- canonical/software602 groupware server
- version/software602 groupware server/6.0.08.1118