CVE-2004-1947

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-04-19 · updated 2026-06-16

Description

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.

Affected products

Softwin Bitdefender: all versions

References

http://marc.info/?l=bugtraq&m=108240639427412&w=2
http://marc.info/?l=bugtraq&m=108248367901616&w=2
http://secunia.com/advisories/11427
http://securitytracker.com/id?1009862
http://www.osvdb.org/5549
http://www.securityfocus.com/bid/10174
http://www.securityfocus.com/bid/10175
https://exchange.xforce.ibmcloud.com/vulnerabilities/15911
http://marc.info/?l=bugtraq&m=108240639427412&w=2
http://marc.info/?l=bugtraq&m=108248367901616&w=2
http://secunia.com/advisories/11427
http://securitytracker.com/id?1009862

Get alerted when CVE-2004-1947 or the next vulnerability affects your stack