CVE-2005-3154

Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name...

Multiple antiviruses file scanning bypass and format string bug

It's possible to bypass file scanning by using special characters for example 01 in filename. Format string bug perenset while parsing filename in BitDefender...

CVE-2005-2298

BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards...

CVE-2005-2298

BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards...

CVE-2005-2298

CVE-2005-2298 affects BitDefender Engine versions 1.6.1 and earlier. The issue arises because the scanner does not properly process all email attachments: begin and end commands in the message body are treated as a uuencoded attachment, causing scanning to stop prematurely. This allows remote att...

bitRace.txt

----------------------------- Product: BitDefender Version: 8 Tested on: Windows 2000 SP4 Vulnerability: Race condition ----------------------------- BACKGROUND ---------- BitDefender ensures the most advanced antivirus protection, as well as data confidentiality, active content control and...

CVE-2004-1947

The CVE-2004-1947 entry concerns the AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online. The vulnerability allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary c...

CVE-2004-1947

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to 1 obtain sensitive information such as system drives and contents or 2 use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab...

CVE-2005-1286

Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process...

CVE-2005-1286

CVE-2005-1286 affects BitDefender 8 with an unquoted Windows search path when executing a process. The root cause is lack of quoting of the full pathname, enabling a local user to prevent BitDefender from starting by creating a malicious C:\program.exe. The NVD entry documents this local, high-co...

CVE-2005-1286

Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process...

CVE-2004-1947

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to 1 obtain sensitive information such as system drives and contents or 2 use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab...

[Full-Disclosure] BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure

Application: BitDefender Scan OnlineActiveX Vendors: http://www.bitdefender.com/scan/Msie/index.php Platforms: Windows Bug: Remote File Download & Execute & Private Information Disclosure Risk: High - Running Arbitary Code Exploitation: Remote with browser Date: 19 Apr 2004 Author: Rafel Ivgi,...

Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload / Execution

source: https://www.securityfocus.com/bid/10174/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded and executed on a system running th...

Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure

source: https://www.securityfocus.com/bid/10175/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote user to execute a method in the offending object that provides access to...

Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload Execution

Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload Execution source: https://www.securityfocus.com/bid/10174/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows...

Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure

Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure source: https://www.securityfocus.com/bid/10175/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote...