ID CVE-2008-1735
Summary BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.
References
Vulnerable Configurations
  • cpe:2.3:a:bitdefender:antivirus:2008:*:*:*:*:*:*:*
    cpe:2.3:a:bitdefender:antivirus:2008:*:*:*:*:*:*:*
CVSS
Base: 4.9 (as of 11-10-2018 - 20:36)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 28741
bugtraq 20080428 CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls
misc
sectrack 1019943
secunia 30005
sreason 3838
vupen ADV-2008-1384
xf bitdefender-ssdt-dos(42081)
Last major update 11-10-2018 - 20:36
Published 30-04-2008 - 00:10
Last modified 11-10-2018 - 20:36
Back to Top