Lucene search

K
cveMitreCVE-2009-0850
HistoryMar 09, 2009 - 5:30 p.m.

CVE-2009-0850

2009-03-0917:30:00
CWE-79
mitre
web.nvd.nist.gov
33
cve-2009-0850
cross-site scripting
xss
bitdefender
internet security 2009
vulnerability
nvd
rar
zip
remote attackers.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.239

Percentile

96.6%

Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file.

Affected configurations

Nvd
Node
bitdefenderinternet_securityMatch2009
VendorProductVersionCPE
bitdefenderinternet_security2009cpe:2.3:a:bitdefender:internet_security:2009:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.239

Percentile

96.6%