CVE-2006-6627

CVE-2006-6627 describes an integer overflow vulnerability in BitDefender products prior to version 20060829, including Antivirus, Internet Security, and Mail Protection. This flaw, dubbed the "cevakrnl.xmd vulnerability," allows remote attackers to execute arbitrary code by exploiting a heap-based buffer overflow triggered by a specially crafted packed PE file. With a CVSS score of 10.0, this vulnerability is critical, requiring no authentication and having a low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, and it has received no community discussion or media coverage.