CVE-2017-17408: Integer Overflow
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5101.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17408?
CVE-2017-17408 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2017-17408?
To mitigate CVE-2017-17408, update your Bitdefender Internet Security 2018 to the latest version beyond 73447.
Who is affected by CVE-2017-17408?
CVE-2017-17408 affects installations of Bitdefender Internet Security 2018 specifically those running version 73447 and lower.
What type of attacks can exploit CVE-2017-17408?
CVE-2017-17408 can be exploited by remote attackers executing arbitrary code through user interaction with malicious content.
Is user interaction required for CVE-2017-17408 exploitation?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file to exploit CVE-2017-17408.