Search/CVE-2005-2298
● CVE

CVE-2005-2298

VendorsoftwinProductbitdefender engineDiscoveredJul 19, 2005UpdatedApr 16, 2026

BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.

CVSS v3.1
—
EPSS
1.40%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Jul 19, 2005
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026