Multiple Panda Antivirus ActiveScan ActiveX security vulnerabilities

Memory corruption, information leak, client PC rebooting...

CVE-2006-4295

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2006-4295

CVE-2006-4295 describes a cross-site scripting (XSS) vulnerability in Panda ActiveScan 5.53.00, specifically in the ascan_6.asp endpoint. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the email parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Med...

CVE-2006-4295

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2006-4295: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Panda ActiveScan 5.53 - Ascan_6.asp ActiveX Control Cross-Site Scripting

Panda ActiveScan 5.53 - Ascan6.asp ActiveX Control Cross-Site Scripting source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting

source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1905

Panda ActiveScan 5.0 is affected through ascontrol.dll; the issue enables remote DoS by calling SetSitesFile, causing a crash. No additional exploitation details or fixes are provided in the available documents.

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Technical details about CVE-2004-1904 are not provided in the supplied documents; no publicly accessible specifics (affected product, root cause, or remediation) are present beyond the initial description. Monitor for updates.

CVE-2004-1904: Undefined Security Weakness

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1905: Undefined Security Weakness

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S)

Application: Panda ActiveScan Vendors: http://www.activescan.com http://www.pandasoftware.com/activescan/com/activescanprincipal.htm Version: 5.0 Platforms: Windows Bug: Buffer Overflow and A CrashD.O.S Risk: High - Running Arbitary Code At SYSTEM Level Exploitation: Remote with browser Date: 1 A...

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the...

Panda ActiveScan 5.0 - ascontrol.dll Remote Heap Overflow

Panda ActiveScan 5.0 - ascontrol.dll Remote Heap Overflow source: https://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or...

Panda ActiveScan 5.0 - 'ascontrol.dll' Remote Heap Overflow

source: https://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or leverage the issue to execute arbitrary code. The issue is...

Panda ActiveScan 5.0 - 'ascontrol.dll' Denial of Service

source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the 'SetSitesFile' is called in combination with setting t...