Vulnerability Description
Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings.
CVSS Score
7.2
HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Bitdefender Client | professional_plus_8.02 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051883.html
- http://www.bitdefender.com/KB325-en--Format-string-vulnerability.html
- http://www.securityfocus.com/archive/1/457414/100/0/threaded
- http://www.securityfocus.com/bid/22128
- http://www.vupen.com/english/advisories/2007/0253
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31608
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051883.html
- http://www.bitdefender.com/KB325-en--Format-string-vulnerability.html
- http://www.securityfocus.com/archive/1/457414/100/0/threaded
- http://www.securityfocus.com/bid/22128
- http://www.vupen.com/english/advisories/2007/0253
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31608
FAQ
What is CVE-2007-0391?
CVE-2007-0391 is a vulnerability with a CVSS score of 7.2 (HIGH). Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings.
How severe is CVE-2007-0391?
CVE-2007-0391 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-0391?
Check the references section above for vendor advisories and patch information. Affected products include: Bitdefender Bitdefender Client.