CVE-2009-0850

Bitdefender Internet Security - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file.

References (5)

[Vendor Advisory] http://secunia.com/advisories/34082

[Vendor Advisory] http://www.vupen.com/english/advisories/2009/0557

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/501277/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/501299/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/33921

Scores

EPSS 0.0046

EPSS Percentile 63.7%

Classification

CWE

CWE-79

Status published

Affected Products (2)

bitdefender/internet_security

n/a/n/a

Timeline

Published Mar 09, 2009

Tracked Since Feb 18, 2026