CVE-2008-1735

Description

BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.

Affected products

• Bitdefender / antivirus2008 – 2008

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1384
• MISChttp://securityreason.com/securityalert/3838
• VENDOR_ADVISORYhttp://secunia.com/advisories/30005
• MISChttp://kb.bitdefender.com/KB419-en--Security-vulnerability-in-BitDefender-2008.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/42081
• MISChttp://www.coresecurity.com/?action=item&id=2249
• MISChttp://www.securityfocus.com/archive/1/491405/100/0/threaded
• MISChttp://www.securityfocus.com/bid/28741
• MISChttp://securitytracker.com/id?1019943