CVE-2018-18059

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

CVE-2018-18058

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in...

Design/Logic Flaw

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

Design/Logic Flaw

An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this...

Design/Logic Flaw

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in...

CVE-2018-18058

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in...

CVE-2018-18058

Bitdefender Engines prior to 7.76662 are affected by an input validation flaw in the iso.xmd parser that can trigger a division-by-zero, leading to Denial of Service when a user visits a malicious page or opens a crafted file. Multiple sources (NVD entry, Red Hat advisory, CVE listings) corrobora...

CVE-2018-18059

Bitdefender Engines prior to 7.76675 contain a vulnerability in the rar.xmd parser caused by insufficient validation of user-supplied data, leading to a read past the end of an allocated buffer. This weakness can contribute to a denial-of-service condition when exploited. Exploitation requires us...

CVE-2018-18059

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

CVE-2018-18060

CVE-2018-18060 affects Bitdefender Engines prior to 7.76808. The vulnerability resides in the dalvik.xmd parser, arising from insufficient validation of user-supplied data, which can cause an out-of-bounds read in the parser and, when paired with other issues, may lead to denial-of-service. Explo...

CVE-2018-18060

An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this...

Bitdefender Engines dalvik.xmd Parser Buffer Overflow Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the dalvik.xmd parser in Bitdefender Engines versions prior to 7.76808, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Bitdefender Engines rar.xmd Parser Out-of-Bounds Read Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the rar.xmd parser in Bitdefender Engines versions prior to 7.76675, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Bitdefender Engines iso.xmd Parser Out-of-Bounds Read Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the iso.xmd parser in Bitdefender Engines versions prior to 7.76662, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

New GandCrab Decryptor Unlocks Files of Updated Ransomware

Yet another free decryptor is available for GandCrab ransomware victims. The tool, released Tuesday, is the third decryptor update in the past year that thwarts the prolific and fast-evolving GandCrab ransomware. Europol police announced availability of the update, which now unlocks data encrypte...

PT-2019-18297 · Bitdefender · Bitdefender Safepay

Name of the Vulnerable Software and Affected Versions: Bitdefender SafePay version 23.0.10.34 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

Bitdefender SafePay exec Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

Bitdefender SafePay launch Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

Bitdefender SafePay openFile Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

Bitdefender BOX 2 bootstrap download_image command injection vulnerability

Summary An exploitable command injection vulnerability exists in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method /api/downloadimage unsafely handles the production firmware URL supplied by remote servers, leading to arbitrary execution of system commands...