CVE-2005-2298

MEDIUM 5.0CVE-2005-2298 · Published 19/07/2005 · updated 16/06/2026

In short

CVE-2005-2298 is a MEDIUM (CVSS 5.0) vulnerability affecting bitdefender engine (softwin).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bitdefender engine softwin	`≤ 1.6.1`	No fix yet

Description

BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.

References

marc.info
securitytracker.com/id

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free