CVE-2008-6661 - Vulnerability Details - OpenCVE

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.04383.

Key SSVC decision points have not yet been added.

Vendors	Products
Bitdefender	Bitdefender Antivirus
Linux	Linux Kernel

Configuration 1 [-]

AND

cpe:2.3:a:bitdefender:bitdefender_antivirus:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2008-6623	Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://marc.info/?l=bugtraq&m=122893066212987&w=2
http://secunia.com/advisories/33240
http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html
http://www.osvdb.org/50826
http://www.securityfocus.com/bid/32751
http://www.vupen.com/english/advisories/2008/3459
https://exchange.xforce.ibmcloud.com/vulnerabilities/47219

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-04-07T23:00:00

Updated: 2024-08-07T11:34:47.267Z

Reserved: 2009-04-07T00:00:00

Link: CVE-2008-6661

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-04-07T23:30:00.187

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-6661

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-12-19T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "33240", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/33240"}, {"name": "20081210 [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=122893066212987&w=2"}, {"name": "50826", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/50826"}, {"name": "ADV-2008-3459", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/3459"}, {"name": "bitdefender-pe-overflow(47219)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47219"}, {"tags": ["x_refsource_MISC"], "url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html"}, {"name": "32751", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/32751"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-6661", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "33240", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/33240"}, {"name": "20081210 [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=122893066212987&w=2"}, {"name": "50826", "refsource": "OSVDB", "url": "http://www.osvdb.org/50826"}, {"name": "ADV-2008-3459", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/3459"}, {"name": "bitdefender-pe-overflow(47219)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47219"}, {"name": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html", "refsource": "MISC", "url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html"}, {"name": "32751", "refsource": "BID", "url": "http://www.securityfocus.com/bid/32751"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T11:34:47.267Z"}, "title": "CVE Program Container", "references": [{"name": "33240", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/33240"}, {"name": "20081210 [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=122893066212987&w=2"}, {"name": "50826", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/50826"}, {"name": "ADV-2008-3459", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/3459"}, {"name": "bitdefender-pe-overflow(47219)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47219"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html"}, {"name": "32751", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/32751"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-6661", "datePublished": "2009-04-07T23:00:00", "dateReserved": "2009-04-07T00:00:00", "dateUpdated": "2024-08-07T11:34:47.267Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bitdefender:bitdefender_antivirus:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D94CC5D-6271-4063-8996-408ED0F7BE2C", "versionEndIncluding": "7.60825", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de entero en el motor de an\u00e1lisis de Bitdefender para Linux v7.600825 y anteriores, permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) o puede que ejecutar c\u00f3digo de su elecci\u00f3n a a trav\u00e9s de unos ficheros malformados PE empaquetados (1) NeoLite y (2) ASProtect."}], "id": "CVE-2008-6661", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-04-07T23:30:00.187", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=122893066212987&w=2"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/33240"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.osvdb.org/50826"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/32751"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2008/3459"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47219"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=122893066212987&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/33240"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.osvdb.org/50826"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/32751"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2008/3459"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47219"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}