CVE-2017-17408

Bitdefender Internet Security (2018) contains an integer overflow in cevakrnl.xmd that fails to validate user-supplied data, enabling remote code execution with SYSTEM privileges after a user visits a malicious page or opens a malicious file. The issue has been disclosed in ZDI-CAN-5101 (ZDI-17-9...