Description
BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.
References
- ADV-2008-1384 vdb-entry
- 3838 third-party-advisory
- 30005 third-party-advisory
- http://kb.bitdefender.com/KB419-en--Security-vulnerability-in-BitDefender-2008.html
- bitdefender-ssdt-dos(42081) vdb-entry
- http://www.coresecurity.com/?action=item&id=2249
- 20080428 CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls mailing-list
- 28741 vdb-entry
- 1019943 vdb-entry