Multiple BitDefender Security Products CAB File Scan Evasion Vulnerability

Bugtraq ID:	34580
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 17 2009 12:00AM
Updated:	Sep 08 2009 08:51PM
Credit:	Thierry Zoller
Vulnerable:	BitDefender Total Security 2009 0 BitDefender Internet Security 2010 0 BitDefender Internet Security 2009 0 BitDefender for ISA Server 0 BitDefender Client Security 0 BitDefender BitDefender Small Office Security 0 BitDefender BitDefender Security for Mailservers 0 BitDefender BitDefender Security for File Servers 0 BitDefender BitDefender Security for File Servers 0 BitDefender BitDefender for Sharepoint 0 BitDefender BitDefender for Samba 0 BitDefender AntiVirus 2009
Not Vulnerable:

Multiple BitDefender Security Products CAB File Scan Evasion Vulnerability

Multiple BitDefender security products are prone to a vulnerability that may allow certain compressed archives to bypass the scan engine.

Successful exploits will allow attackers to distribute files containing malicious code that the affected security application will fail to detect.

Multiple BitDefender Security Products CAB File Scan Evasion Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple BitDefender Security Products CAB File Scan Evasion Vulnerability

Solution:
Reports indicate that the vendor has released fixes for this issue; Symantec has not been able to confirm this. Please contact the vendor for more information.

Multiple BitDefender Security Products CAB File Scan Evasion Vulnerability

References:

• Bitdefender - Generic bypass/evasion CAB (Thierry Zoller)
  
• BitDefender Homepage (BitDefender)
  
• [TZO-08-2009] Bitdefender generic bypass/evasion (Thierry Zoller )
  
• Re: [TZO-08-2009] Bitdefender generic bypass/evasion ([email protected])