Lucene search

K
cve[email protected]CVE-2008-5409
HistoryDec 10, 2008 - 6:44 a.m.

CVE-2008-5409

2008-12-1006:44:42
CWE-119
web.nvd.nist.gov
18
cve-2008-5409
vulnerability
pdf.xmd
antivirus
security software
remote code execution
denial of service
application crash
crafted pdf
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.209 Low

EPSS

Percentile

96.4%

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
bitdefenderantivirusMatch10_nil_standard
OR
bitdefenderbitdefenderMatch10_nil_free_edition
OR
bullguardinternet_securityMatch8.5
OR
software602groupware_serverMatch6.0.08.1118

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.209 Low

EPSS

Percentile

96.4%