Unscored CVE-2009-0850 EUVD-2009-0847GHSA-6g4h-xrx8-p9xf

Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary we…

Published Mar 9, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file.

References

33921 vdb-entry
20090227 Re: BitDefender Internet Security XSS mailing-list
34082 third-party-advisory
20090226 BitDefender Internet Security XSS mailing-list
ADV-2009-0557 vdb-entry