CVE Feed

    Dashboard / CVE / CVE-2008-5409

    CVE-2008-5409

    Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter. NOTE: some of these details are obtained from third party information.

    Published:Dec 9, 2008
    Last Modified:Apr 23, 2026
    EPS:Dec 9, 2008
    EPSS Score:0.23954
    CVSS Score:9.3

    Affected Products

    Vendor
    Bitdefender
    Product
    Antivirus
    Vendor
    Bitdefender
    Product
    Bitdefender
    Vendor
    Bullguard
    Product
    Internet Security
    Vendor
    Software602
    Product
    Groupware Server

    Exploits

    http://www.securityfocus.com/bid/32396http://www.securityfocus.com/bid/32396https://www.exploit-db.com/exploits/7178

    Related CVEs

    CVE-2025-7073 (CVSS 8.8) — A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows …
    CVE-2023-6154 (CVSS 7.8) — A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Sec…
    CVE-2020-8093 (CVSS 5.3) — A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to i…
    CVE-2020-8092 (CVSS 1.6) — A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local atta…
    CVE-2019-17103 (CVSS 4.9) — An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an …
    CVE-2008-1735 (CVSS 4.9) — BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash)…
    CVE-2007-5775 (CVSS 9.8) — Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High