CVE-2009-0850

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850

BitDefender Internet Security 2009 is vulnerable to a cross-site scripting (XSS) flaw in the way it handles filenames inside virus-infected archive files (RAR/ZIP). This user-assisted exploit can inject arbitrary web script or HTML via the archive filename, as described for CVE-2009-0850. The vul...