CVE-2018-18058
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-18058
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Bitdefender Engines iso.xmd解析器数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bitdefender Engines是罗马尼亚比特梵德（Bitdefender）公司的一款杀毒软件引擎。 Bitdefender Engines 7.76662之前版本中的iso.xmd解析器存在越界读取漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-18058
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-18058
请登录查看更多情报信息。
Same Patch Batch · n/a · 2019-05-24 · 35 CVEs total
| CVE-2019-11876 | PrestaShop 跨站脚本漏洞 | |
| CVE-2018-19613 | Westermo DR-260、DR-250和MR-260 跨站请求伪造漏洞 | |
| CVE-2019-10847 | Computrols CBAS Web 跨站请求伪造漏洞 | |
| CVE-2019-10848 | Computrols CBAS Web 信息泄露漏洞 | |
| CVE-2016-10245 | Doxygen 跨站脚本漏洞 | |
| CVE-2016-8898 | OIC Exponent CMS SQL注入漏洞 | |
| CVE-2016-8900 | OIC Exponent CMS 注入漏洞 | |
| CVE-2019-11604 | Quest Software KACE Systems Management Appliance 跨站脚本漏洞 | |
| CVE-2019-11875 | Blue Prism Group Robotic Process Automation 权限许可和访问控制问题漏洞 | |
| CVE-2018-19612 | Westermo DR-260、DR-250和MR-260 代码问题漏洞 | |
| CVE-2019-12150 | Karamasoft UltimateEditor 代码问题漏洞 | |
| CVE-2019-12155 | QEMU 代码问题漏洞 | |
| CVE-2019-12195 | TP-Link TL-WR840N 跨站脚本漏洞 | |
| CVE-2019-12315 | Samsung SCX-824 跨站脚本漏洞 | |
| CVE-2019-12314 | Deltek Maconomy 路径遍历漏洞 | |
| CVE-2019-12313 | Shave 跨站脚本漏洞 | |
| CVE-2019-12312 | Libreswan 代码问题漏洞 | |
| CVE-2016-10751 | Osclas 路径遍历漏洞 | |
| CVE-2016-10759 | Precurio Software Precurio Xinha插件路径遍历漏洞 | |
| CVE-2016-10758 | PHPKIT 代码问题漏洞 |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-18058
No comments yet