Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

BitDefender AvxScanOnlineCtrl COM Object Upload and Execution Vulnerabilit


                                                source: http://www.securityfocus.com/bid/10174/info

Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded and executed on a system running the affected software.

This issue may be leveraged by a remote attacker to upload and execute arbitrary files on an affected system; most likely resulting in unauthorized access. Other attackers are also possible.

&#60;HTML&#62;
&#60;OBJECT id=seemycomputer codeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,1 hspace=0 vspace=0 align=&#34;top&#34; classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EA width=405 height=180&#62;
&#60;PARAM NAME=&#34;_ExtentX&#34; VALUE=&#34;6614&#34;&#62;
&#60;PARAM NAME=&#34;_ExtentY&#34; VALUE=&#34;4498&#34;&#62;
&#60;PARAM NAME=&#34;_StockProps&#34; VALUE=&#34;9&#34;&#62;
&#60;PARAM NAME=&#34;ForeColor&#34; VALUE=&#34;0&#34;&#62;
&#60;PARAM NAME=&#34;BackColor&#34; VALUE=&#34;16777215&#34;&#62;&#60;/OBJECT&#62;
&#60;/HTML&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1