PT-2009-2131 · Bitdefender · Bitdefender For Linux

Name of the Vulnerable Software and Affected Versions: Bitdefender for Linux versions 7.60825 and earlier Description: The issue is related to multiple integer overflows in the scanning engine, which can be exploited by remote attackers using malformed NeoLite and ASProtect packed PE files. This...

BitDefender Internet Security 2009 XSS Vulnerability

This host is installed with BitDefender Internet Security and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodbitdefenderxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ BitDefender Internet Security 2009 XSS Vulnerability Authors: Sharath S Copyright: Copyrig...

BitDefender Products Detection (Windows SMB Login)

SMB login-based detection of BitDefender products. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BitDefender Internet Security 2009 XSS Vulnerability

BitDefender Internet Security is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Cross site scripting

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850

BitDefender Internet Security 2009 is vulnerable to a cross-site scripting (XSS) flaw in the way it handles filenames inside virus-infected archive files (RAR/ZIP). This user-assisted exploit can inject arbitrary web script or HTML via the archive filename, as described for CVE-2009-0850. The vul...

CVE-2009-0850

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

BitDefender Internet Security 2009文件名跨站脚本漏洞

BUGTRAQ ID: 33921 BitDefender Internet Security是可提供多种防护功能的安全软件。 在扫描文件时BitDefender Internet Security使用flash显示文件名。如果用户准备了包含有恶意脚本的畸形的rar或zip压缩文档，则当杀毒软件扫描到该文件时就会执行脚本。 Softwin BitDefender Internet Security 2009 厂商补丁： Softwin ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

BitDefender Internet Security XSS

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender Cross Site Scripting

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender crossaplication scripting

Filename is displayed without filtering during scanning...

Bitdefender's Thailand Site SQL Injection

http://www.bitdefenderthailand.com/newsdetail.php?id=-1%20UNION%20SELECT%201,2,concatws0x3a,version,database,user,4,5,6,7,8,9,10/ 5.0.37-community-nt:amphonetbitdefender:amphonetpriy@localhost...

BitDefender PE文件解析整数溢出漏洞

BUGTRAQ ID: 32751 BitDefender Antivirus是具有功能强大的反病毒引擎以及互联网过滤技术的杀毒软件。 BitDefender在处理畸形结构的PE文件时存在漏洞，如果使用GNU/Linux版本的BitDefender扫描到了NeoLite或ASProtect封装的特制PE文件的话，就可能触发整数溢出，导致扫描引擎崩溃。 Softwin BitDefender v7 for Linux Softwin ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple security vulnerabilities in different antiviral applications

ClamAV: LZH DoS; BitDefender: multiple integer overflow on PE parsing; Avast: multiple buffer overflows on ISO and RPM parsing; AVG: crash on UPX files; Sophos: multiple DoS on different compressed formats parsing; F-Secure F-prot: protection bypass...

Design/Logic Flaw

Unspecified vulnerability in the pdf.xmd module in 1 BitDefender Free Edition 10 and Antivirus Standard 10, 2 BullGuard Internet Security 8.5, and 3 Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code v...

CVE-2008-5409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in the pdf.xmd module in 1 BitDefender Free Edition 10 and Antivirus Standard 10, 2 BullGuard Internet Security 8.5, and 3 Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code v...

BitDefender 'pdf.xmd' Module PDF Parsing Remote DoS Vulnerability

This host is installed with BitDefender Internet Security and AntiVirus and is prone to denial of service vulnerability. The flaw is due to boundary error in 'pdf.xmd' module when parsing of data encoded using 'FlateDecode' and 'ASCIIHexDecode' filters. This can be exploited to cause a memory...