CVE-2006-6627
- State
- Published
- Severity
- Not scored
- Published
- Dec 18, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 17, 2006
Description
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow, aka the "cevakrnl.xmd vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 21610vdb-entry
- 1017389vdb-entry
- 2044third-party-advisory
- http://www.bitdefender.com/KB323-en--cevakrnl.xmd-vulnerability.html
- 20061215 BitDefender AV Packed PE File Parsing Engine Heap Overflowmailing-list
- 23415third-party-advisory
- 20061215 BitDefender AV Packed PE File Parsing Engine Heap Overflowmailing-list
- ADV-2006-5040vdb-entry
- bitdefender-pefile-bo(30904)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.