Approved changes feed: RSS · Atom

cpe:2.3:a:bitdefender:internet_security_2018:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitdefender (d5582d91-5be9-5b61-8324-642705c220ed)
ProductInternet Security 2018 (5a02fd75-6a68-5aa3-9e56-4387049a9390)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17410 vulnerable 2026-06-03 14:36:55.371507 Details available
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within emulator 0x102 in cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5116.
Published: 2017-12-21T14:00:00.000Z
Updated: 2024-08-05T20:51:31.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17409 vulnerable 2026-06-03 14:36:55.371195 Details available
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within emulator 0x10A in cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5102.
Published: 2017-12-21T14:00:00.000Z
Updated: 2024-08-05T20:51:31.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17408 vulnerable 2026-06-03 14:36:55.370795 Details available
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5101.
Published: 2017-12-21T14:00:00.000Z
Updated: 2024-08-05T20:51:31.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10954 vulnerable 2026-06-03 14:36:27.477331 Details available
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within pdf.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-4361.
Published: 2017-10-31T19:00:00.000Z
Updated: 2024-08-05T17:50:12.839Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.