PT-2017-14771 · Bitdefender · Bitdefender Internet Security
Pagefault
·
Published
2017-12-12
·
Updated
2019-10-09
·
CVE-2017-17410
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Bitdefender Internet Security 2018
Description
This issue allows remote attackers to execute arbitrary code on vulnerable installations. It requires user interaction, such as visiting a malicious page or opening a malicious file. The flaw exists within emulator 0x102 in cevakrnl.xmd due to the lack of proper validation of user-supplied data, resulting in a write past the end of an allocated object. An attacker can leverage this to execute code under the context of SYSTEM.
Recommendations
For Bitdefender Internet Security 2018, consider disabling the emulator 0x102 in cevakrnl.xmd as a temporary workaround until a patch is available. Restrict access to potentially malicious pages or files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bitdefender Internet Security