CVE-2005-2298 BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefen...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softwin bitdefender engine | <= 1.6.1 | No fix listed |
References
- 20050714 05_07_14-bitdefender_malicious_content_bypass mailing-list
- 1014495 vdb-entry