CVE-2006-5966

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...

CVE-2006-5966

CVE-2006-5966 affects Panda ActiveScan 5.53.00 and earlier builds up to 5.54.01. The issue arises from two ActiveX controls: ActiveScan.1 Reinicializar allows remote reboot of the system, and PAVPZ.SOS.1 ObtenerTamano allows an attacker to determine arbitrary file existence and size. This is a re...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5967

CVE-2006-5967 describes a race condition in Panda ActiveScan 5.53.00 and earlier than 5.54.01, where multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control are not thread-safe and can lead to memory corruption and arbitrary code execution remotely. The vulnerability affec...

Panda ActiveScan ActiveX控件多个远程安全漏洞

Panda ActiveScan是熊猫的免费在线病毒扫描工具。 Panda ActiveScan中存在多个远程安全漏洞，具体如下： 1 在调用ActiveScan.1 ActiveX控件的Reinicializar方法时会导致未经用户确认便重启系统。 2 PAVPZ.SOS.1 ActiveX控件的ObtenerTamano方式会返回指定本地文件名的文件大小，这可能允许恶意站点判断是否存在本地文件及相应的文件大小。 3 ActiveScan.1 ActiveX控件的Analizar方法线程不安全，恶意站点可能通过竞争条件破坏内存，执行任意代码。 Panda ActiveScan...

CVE-2006-4295

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2006-4295

CVE-2006-4295 describes a cross-site scripting (XSS) vulnerability in Panda ActiveScan 5.53.00, specifically in the ascan_6.asp endpoint. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the email parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Med...

Panda ActiveScan 5.53 - Ascan_6.asp ActiveX Control Cross-Site Scripting

Panda ActiveScan 5.53 - Ascan6.asp ActiveX Control Cross-Site Scripting source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting

source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...

CVE-2004-1905

Panda ActiveScan 5.0 is affected through ascontrol.dll; the issue enables remote DoS by calling SetSitesFile, causing a crash. No additional exploitation details or fixes are provided in the available documents.

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1904

Technical details about CVE-2004-1904 are not provided in the supplied documents; no publicly accessible specifics (affected product, root cause, or remediation) are present beyond the initial description. Monitor for updates.

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S)

Application: Panda ActiveScan Vendors: http://www.activescan.com http://www.pandasoftware.com/activescan/com/activescanprincipal.htm Version: 5.0 Platforms: Windows Bug: Buffer Overflow and A CrashD.O.S Risk: High - Running Arbitary Code At SYSTEM Level Exploitation: Remote with browser Date: 1 A...

Panda ActiveScan 5.0 - ascontrol.dll Remote Heap Overflow

Panda ActiveScan 5.0 - ascontrol.dll Remote Heap Overflow source: https://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or...

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the...

Panda ActiveScan 5.0 - 'ascontrol.dll' Remote Heap Overflow

source: https://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or leverage the issue to execute arbitrary code. The issue is...

Panda ActiveScan 5.0 - 'ascontrol.dll' Denial of Service

source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the 'SetSitesFile' is called in combination with setting t...