CVE-2008-5409 Memory corruption in n/a
Remote attackers can cause denial of service or execute arbitrary code via crafted PDF files processed by vulnerable antivirus software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2008-5409?
CVE-2008-5409 is a critical memory corruption vulnerability in n/a, published on 9 Dec 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter. NOTE: some of these details are obtained from third party information.
Weakness: CWE-119
Which versions are affected by CVE-2008-5409?
It affects 4 products.
Products include Bitdefender Antivirus, Bitdefender Bitdefender, Bullguard Internet Security, Software602 Groupware Server.
How do I fix CVE-2008-5409?
No fix has been published for CVE-2008-5409 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2008-5409 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-5409 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
- CVE-2007-5775 Code injection in n/a
- CVE-2025-7073 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
- CVE-2023-6154 Local privilege escalation in Bitdefender Total Security (VA-11168)
- CVE-2020-8093 Code Injection into Bitdefender AV for Mac
- CVE-2019-17103 Get-task-allow entitlement via BDLDaemon on macOS
Sources
Also known as GHSA-w5c9-rfx7-37rh.