exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

lds-18.txt

lds-18.txt
Posted Jan 20, 2007
Authored by Deral Heiland | Site LayeredDefense.com

A format string vulnerability has been discovered within BitDefender Client Professional Plus build 8.02.

tags | advisory
SHA-256 | aae2a9aab9a8ac2ada062219db23d7fb06500ea56412d9d71b0e791d9299b51b

lds-18.txt

Change Mirror Download
================================================ 
Layered Defense Research Advisory 18 January 2007
================================================
1) Affected Software
BitDefender Client Professional Plus build 8.02
================================================
2) Severity Rating:
Low risk
Impact: Local read write arbitrary memory, denial of service.
================================================
3) Description of Vulnerability
A format string vulnerability was discovered within BitDefender Client Professional Plus build 8.02. The vulnerability is due to improper processing of format strings when scan logs are created. When special crafted format strings are entered in to the scan job settings an attacker can read/write arbitrary memory and at a minimum can cause a denial of service condition.
================================================
4) Solution
Fix: Installed BitDefender solutions were updated automatically through the regular update function.
================================================
5) Time Table:
01/02/2007 Reported Vulnerability to Vendor.
01/04/2007 Vendor acknowledged the vulnerability
01/18/2007 Vendor releases fix
================================================
6) Credits Discovered by Deral Heiland, www.LayeredDefense.com
================================================
7) Reference
Bitdefender: http://www.bitdefender.com/KB325-en--Format-string-vulnerability.html
================================================
8) About Layered Defense: Layered Defense, Is a group of security professionals that work together on ethical Research, Testing and Training within the information security arena. http://www.layereddefense.com
================================================
Login or Register to add favorites

File Archive:

December 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    0 Files
  • 2
    Dec 2nd
    41 Files
  • 3
    Dec 3rd
    25 Files
  • 4
    Dec 4th
    0 Files
  • 5
    Dec 5th
    0 Files
  • 6
    Dec 6th
    0 Files
  • 7
    Dec 7th
    0 Files
  • 8
    Dec 8th
    0 Files
  • 9
    Dec 9th
    0 Files
  • 10
    Dec 10th
    0 Files
  • 11
    Dec 11th
    0 Files
  • 12
    Dec 12th
    0 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close