Multiple BitDefender Security Products PDF File Scan Evasion Vulnerability
BID:35010
Info
Multiple BitDefender Security Products PDF File Scan Evasion Vulnerability
| Bugtraq ID: | 35010 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2009 12:00AM |
| Updated: | May 21 2009 01:21AM |
| Credit: | Thierry Zoller |
| Vulnerable: |
BitDefender Total Security 2009 0 BitDefender Small Office Security 0 BitDefender SBS Security 0 BitDefender Internet Security 2009 0 BitDefender for Samba 0 BitDefender for MS Exchange 5.5 0 BitDefender for MS Exchange 2003 0 BitDefender for MS Exchange 2000 0 BitDefender for Mail Servers 0 BitDefender for ISA Server 0 BitDefender Corporate Security 0 BitDefender Client Security 0 BitDefender Business Security 0 BitDefender Antivirus for Unices 0 BitDefender AntiVirus 2009 |
| Not Vulnerable: | |
Discussion
Multiple BitDefender Security Products PDF File Scan Evasion Vulnerability
Multiple BitDefender security products are prone to a vulnerability that may allow certain files to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the affected security application will fail to detect.
The following products are affected:
BitDefender Antivirus 2009
BitDefender Internet Security 2009
BitDefender Total Security 2009
BitDefender Small Office Security
BitDefender for File Servers
BitDefender for Samba
BitDefender for SharePoint
BitDefender Security for Exchange
BitDefender Security for Mail Servers
BitDefender for ISA Servers
BitDefender Client Security
BitDefender Business Security
BitDefender Antivirus Scanner for Unices
BitDefender Corporate Security
BitDefender SBS Security
Multiple BitDefender security products are prone to a vulnerability that may allow certain files to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the affected security application will fail to detect.
The following products are affected:
BitDefender Antivirus 2009
BitDefender Internet Security 2009
BitDefender Total Security 2009
BitDefender Small Office Security
BitDefender for File Servers
BitDefender for Samba
BitDefender for SharePoint
BitDefender Security for Exchange
BitDefender Security for Mail Servers
BitDefender for ISA Servers
BitDefender Client Security
BitDefender Business Security
BitDefender Antivirus Scanner for Unices
BitDefender Corporate Security
BitDefender SBS Security
Exploit / POC
Multiple BitDefender Security Products PDF File Scan Evasion Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple BitDefender Security Products PDF File Scan Evasion Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Multiple BitDefender Security Products PDF File Scan Evasion Vulnerability
References:
References:
- [TZO-23-2009] - Bitdefender generic PDF evasion (heuristics) (Thierry Zoller)
- BitDefender Homepage (BitDefender)
- [TZO-22-2009] Bitdefender generic evasion of heuristics (for PDF) (Thierry Zoller