Description
Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name.
References
- http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html
- 16991 third-party-advisory
- 45 third-party-advisory
- 14968 vdb-entry
- http://shadock.net/secubox/BitDefenderLoggingFunc.html