Unscored severity · published Apr 19, 2004
CVE-2004-1947
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or…
–
CVSS
6.8%
EPSS
No
On KEV
Description
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bitdefender · Softwin
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1947
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1947
marc.info
http://marc.info/?l=bugtraq&m=108240639427412&w=2
marc.info
http://marc.info/?l=bugtraq&m=108248367901616&w=2
Exploit
http://secunia.com/advisories/11427
securitytracker.com
http://securitytracker.com/id?1009862
www.osvdb.org
http://www.osvdb.org/5549
www.securityfocus.com
http://www.securityfocus.com/bid/10174
More from Bitdefender
–
CVE-2012-1429
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command…
–
CVE-2006-6627
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for…
–
CVE-2005-3154
Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary…