BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bitdefender_engine | Softwin | * | 1.6.1 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=112137542212322\u0026w=2
- http://securitytracker.com/id?1014495
- http://marc.info/?l=bugtraq\u0026m=112137542212322\u0026w=2
- http://securitytracker.com/id?1014495