CVE-2005-3154

Опубликовано: 05 окт. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name.

Ссылки

http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html
Broken Link
http://secunia.com/advisories/16991
Permissions Required
http://securityreason.com/securityalert/45
Third Party Advisory
http://shadock.net/secubox/BitDefenderLoggingFunc.html
Broken Link
http://www.securityfocus.com/bid/14968
Third Party Advisory
http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html
Broken Link
http://secunia.com/advisories/16991
Permissions Required
http://securityreason.com/securityalert/45
Third Party Advisory
http://shadock.net/secubox/BitDefenderLoggingFunc.html
Broken Link
http://www.securityfocus.com/bid/14968
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:softwin:bitdefender:7.2:*:*:*:*:*:*:*

cpe:2.3:a:softwin:bitdefender:8.0:*:*:*:*:*:*:*

cpe:2.3:a:softwin:bitdefender:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02907

Низкий

7.5 High

CVSS2

Дефекты

CWE-134

Связанные уязвимости

GHSA-vfx7-5239-r253

github

почти 4 года назад