← Vulnerability feed

Vulnerability record · CVE-2004-1947 · published 19 April 2004

CVE-2004-1947: Softwin bitdefender vulnerability

Softwin · Bitdefender

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.

5.0 CVSS 2.0 Medium EPSS 6.8% · top 6.2%
5.0CVSS 2.0 base score
6.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=108240639427412&w=2
http://marc.info/?l=bugtraq&m=108248367901616&w=2
http://secunia.com/advisories/11427 ExploitVendor Advisory
http://securitytracker.com/id?1009862
http://www.osvdb.org/5549
http://www.securityfocus.com/bid/10174
http://www.securityfocus.com/bid/10175 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15911
http://marc.info/?l=bugtraq&m=108240639427412&w=2
http://marc.info/?l=bugtraq&m=108248367901616&w=2
http://secunia.com/advisories/11427 ExploitVendor Advisory
http://securitytracker.com/id?1009862
http://www.osvdb.org/5549
http://www.securityfocus.com/bid/10174
http://www.securityfocus.com/bid/10175 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15911

Track CVE-2004-1947 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6627Softwin bitdefender vulnerabilityInteger overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet …EPSS 7.4%7.5CVE-2005-3154Softwin bitdefender vulnerabilityFormat string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service …EPSS 3.5%4.3CVE-2012-1429Multiple antivirus ELF parsers allow malware detection bypassThe ELF file parser in several antivirus products (Bitdefender, Comodo, Emsisoft, eSafe, F-Secure, Ikarus, McAfee, nProtect) mishandles an ELF file c…EPSS 92%analysed

Source: NIST National Vulnerability Database (record CVE-2004-1947), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.