Lucene search

K
cve[email protected]CVE-2004-1947
HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1947

2005-05-1004:00:00
web.nvd.nist.gov
27
cve-2004-1947
bitdefender
avxscanonline
activex
remote attack
sensitive information
arbitrary code
download
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.7 High

AI Score

Confidence

Low

0.075 Low

EPSS

Percentile

94.2%

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.

Affected configurations

NVD
Node
softwinbitdefender

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.7 High

AI Score

Confidence

Low

0.075 Low

EPSS

Percentile

94.2%

Related for CVE-2004-1947