Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Security App Flaws :: va2720.htm

BitDefender Internet Security XSS



BitDefender Internet Security XSS
BitDefender Internet Security XSS




Application: BitDefender Internet Security 2009
 OS: Windows Xp (All patches a day)
------------------------------------------------------
1 - Description
2 - Vulnerability
3 - POC/EXPLOIT
------------------------------------------------------
Description

BitDefender Internet Security is a security software
that includes multiples protections, for example (anti spam, anti spyware,etc).

------------------------------------------------------
Vulnerability

The vulnerability is caused because when you scans a file,
the antivirus used a flash for display the name of file,
with this you can make a malformed rar or zip that containing a script.
and when the av scans the file, run the script.

------------------------------------------------------
POC/EXPLOIT

The poc is the video because for make the poc you need a virus file.

the xss is this

http://video.google.com/videoplay?docid=-8346357281340486654 ------------------------------------------------------ Juan Pablo Lopez Yacubian


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH