Vulnerability Details CVE-2004-1947
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.145
EPSS Ranking 94.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=108240639427412&w=2
- http://marc.info/?l=bugtraq&m=108248367901616&w=2
- http://secunia.com/advisories/11427
- http://securitytracker.com/id?1009862
- http://www.osvdb.org/5549
- http://www.securityfocus.com/bid/10174
- http://www.securityfocus.com/bid/10175
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15911
- http://marc.info/?l=bugtraq&m=108240639427412&w=2
- http://marc.info/?l=bugtraq&m=108248367901616&w=2
- http://secunia.com/advisories/11427
- http://securitytracker.com/id?1009862
- http://www.osvdb.org/5549
- http://www.securityfocus.com/bid/10174
- http://www.securityfocus.com/bid/10175
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15911
Products affected by CVE-2004-1947
-
cpe:2.3:a:softwin:bitdefender:*