EUVD-2008-3146

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3155

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

CVE-2008-3156

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3155

CVE-2008-3155 is a stack-based buffer overflow in the ActiveX control as2guiie.dll used by Panda ActiveScan prior to version 1.02.00. An attacker can trigger a crash or arbitrary code execution by sending a long argument to the Update method, enabling remote exploitation. The root cause is a buff...

CVE-2008-3156

The CVE-2008-3156 entry affects the Panda ActiveScan product, specifically the ActiveX Control as2guiie.dll, before version 1.02.00. The vulnerability allows remote attackers to download and execute arbitrary CAB files by passing URLs to the Update method, enabling arbitrary code execution on the...

CVE-2008-3156: Undefined Security Weakness

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3155: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

Panda ActiveScan远程缓冲区溢出和任意CAB文件安装漏洞

BUGTRAQ ID: 30086 CNCAN ID：CNCAN-2008070802 Panda ActiveScan是一款病毒在线扫描程序。 Panda ActiveScan存在缓冲区溢出和CAB文件安装问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 Panda ActiveScan的升级函数对参数缺少检查，可导致典型的缓冲区溢出，并可以安装任意攻击者提供的CABinet到目标系统，导致任意代码或者程序执行。 Panda ActiveScan 2.0 升级到最新版本： http://www.pandasecurity.com/activescan/index/...

Panda Security ActiveScan 2.0 (Update) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================= Panda Security ActiveScan 2.0 Update Remote BOF Exploit ========================================================= Author: Karol Wiesek There exists two vulnerabilities in Panda...

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

Panda Security ActiveScan 2.0 Update - Remote Buffer Overflow Author: Karol Wiesek Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet...

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

Author: Karol Wiesek Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet into victims system Panda Security have not respond in any...

CVE-2006-5966

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5966

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5966

CVE-2006-5966 affects Panda ActiveScan 5.53.00 and earlier builds up to 5.54.01. The issue arises from two ActiveX controls: ActiveScan.1 Reinicializar allows remote reboot of the system, and PAVPZ.SOS.1 ObtenerTamano allows an attacker to determine arbitrary file existence and size. This is a re...

CVE-2006-5967

CVE-2006-5967 describes a race condition in Panda ActiveScan 5.53.00 and earlier than 5.54.01, where multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control are not thread-safe and can lead to memory corruption and arbitrary code execution remotely. The vulnerability affec...

Panda ActiveScan ActiveX控件多个远程安全漏洞

Panda ActiveScan是熊猫的免费在线病毒扫描工具。 Panda ActiveScan中存在多个远程安全漏洞，具体如下： 1 在调用ActiveScan.1 ActiveX控件的Reinicializar方法时会导致未经用户确认便重启系统。 2 PAVPZ.SOS.1 ActiveX控件的ObtenerTamano方式会返回指定本地文件名的文件大小，这可能允许恶意站点判断是否存在本地文件及相应的文件大小。 3 ActiveScan.1 ActiveX控件的Analizar方法线程不安全，恶意站点可能通过竞争条件破坏内存，执行任意代码。 Panda ActiveScan...

CVE-2006-5967: Undefined Security Weakness

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5966: Undefined Security Weakness

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...