It's possible to bypass file scanning by using special characters (for example \01) in filename. Format string bug perenset while parsing filename in BitDefender.
vulners.com/securityvulns/securityvulns:doc:9814