CVE-2005-2298: Softwin Bitdefender Engine

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.

Affected products

• Softwin Bitdefender Engine: up to and including 1.6.1

Published 2005-07-19. Last modified 2026-06-16.