Secunia

Sergio Alvarez has reported a vulnerability in BitDefender Anti-Virus, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an integer overflow within the AntiVirus engine when parsing certain packed PE files. This can be exploited to cause a heap-based buffer overflow via a specially crafted PE file.

Successful exploitation may allow execution of arbitrary code.

Solution
Update to the latest version.

Provided and/or discovered by
Sergio Alvarez, n.runs AG.

Changelog
Further details available in Customer Area

Original Advisory
BitDefender:
http://www.bitdefender.com/KB323-en--cevakrnl.xmd-vulnerability.html

Full-Disclosure:
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051319.html

Deep Links
Links available in Customer Area