Unscored severity · published Dec 18, 2006
CVE-2006-6627
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for…
–
CVSS
7.4%
EPSS
No
On KEV
Description
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow, aka the "cevakrnl.xmd vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bitdefender · Softwin
isa_server; ms_exchange_5.5; ms_exchange_2000; ms_exchange_2003 · source: NVD
BA
Bitdefender Antivirus · Softwin
plus · source: NVD
BI
Bitdefender Internet Security · Softwin
All versions, or not specified · source: NVD
BM
Bitdefender Mail Protection · Softwin
enterprises · source: NVD
BO
Bitdefender Online Scanner · Softwin
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6627
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051319.html
secunia.com
http://secunia.com/advisories/23415
securityreason.com
http://securityreason.com/securityalert/2044
securitytracker.com
http://securitytracker.com/id?1017389
www.bitdefender.com
http://www.bitdefender.com/KB323-en--cevakrnl.xmd-vulnerability.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/454501/100/0/threaded
More from Bitdefender
–
CVE-2012-1429
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command…
–
CVE-2005-3154
Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary…
–
CVE-2004-1947
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or…