CVE-2004-1947 The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFi...
MediumCVSS 5.0
EPSS 6.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softwin bitdefender | All versions | No fix listed |
References
- 20040419 BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure mailing-list
- 20040420 Re: BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure mailing-list
- 11427 exploit third-party-advisory vendor-advisory
- 1009862 vdb-entry
- 5549 vdb-entry
- 10174 vdb-entry
- 10175 exploit patch vdb-entry vendor-advisory
- bitdefender-avxscanonline-code-execution(15911) vdb-entry