| Vulnerability Name: | CVE-2005-3154 (CCN-22508) | ||||||||
| Assigned: | 2005-10-04 | ||||||||
| Published: | 2005-10-04 | ||||||||
| Updated: | 2016-09-30 | ||||||||
| Summary: | Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-134 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2005-3154 Source: CONFIRM Type: Broken Link http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html Source: CCN Type: SA16991 BitDefender Anti-Virus Filename Format String Vulnerability Source: SECUNIA Type: Permissions Required 16991 Source: SREASON Type: Third Party Advisory 45 Source: MISC Type: Broken Link http://shadock.net/secubox/BitDefenderLoggingFunc.html Source: CCN Type: BitDefender Web site BitDefender Solutions Source: CCN Type: OSVDB ID: 19840 BitDefender Anti-Virus Logging Function Format String Source: BID Type: Third Party Advisory 14968 Source: CCN Type: BID-14968 BitDefender Antivirus Logging Function Format String Vulnerability Source: XF Type: UNKNOWN bitdefender-create-report-format-string(22508) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||