CVE-2009-0850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...