Unscored severity · published Dec 10, 2008
CVE-2008-5409
Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware…
–
CVSS
11.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · Bitdefender
10 · source: NVD
BI
Bitdefender · Bitdefender
10 · source: NVD
GS
Groupware Server · Software602
6.0.08.1118 · source: NVD
IS
Internet Security · Bullguard
8.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5409
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5409
milw0rm.com
http://milw0rm.com/sploits/2008-BitDefenderDOS.zip
osvdb.org
http://osvdb.org/50010
osvdb.org
http://osvdb.org/50103
osvdb.org
http://osvdb.org/50205
Vendor Advisory
http://secunia.com/advisories/27805
Vendor Advisory
http://secunia.com/advisories/32789
More from Antivirus
9.8
CVE-2007-5775
Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024
7.8
CVE-2025-7073
A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges
7.8
CVE-2023-6154
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows…
7.8
CVE-2020-8093
A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party…
5.5
CVE-2020-8092
A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the…