Panda Remote Heap Overflow

Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...

CVE-2005-3922

Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...

CVE-2005-3922

Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...

CVE-2005-3922

CVE-2005-3922 describes a heap-based buffer overflow in Panda Software Antivirus library (pskcmp.dll) when scanning ZOO archives. The root cause is a boundary/size handling error while decompressing user-supplied archives, potentially enabling arbitrary code execution with the target’s privileges...

CVE-2005-3922: Undefined Security Weakness

Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...

CVE-2005-3380

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3380

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3380

CVE-2005-3380 affects Panda Titanium 2005 4.02.01. A multiple interpretation error lets a file such as BAT, HTML, or EML containing an MZ magic byte sequence (normally associated with EXE) be treated as a safe type, yet could still be executed as a dangerous file type by end-system applications. ...

CVE-2005-3380: Undefined Security Weakness

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3230

Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3230

CVE-2005-3230 describes a multiple interpretation error in unspecified Panda Antivirus versions that lets remote attackers bypass virus detection. The issue is triggered by a malicious executable embedded in a specially crafted RAR file with malformed central and local headers, which can be opene...

CVE-2005-3230

Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3230: Undefined Security Weakness

Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2004-1905

Panda ActiveScan 5.0 is affected through ascontrol.dll; the issue enables remote DoS by calling SetSitesFile, causing a crash. No additional exploitation details or fixes are provided in the available documents.

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Technical details about CVE-2004-1904 are not provided in the supplied documents; no publicly accessible specifics (affected product, root cause, or remediation) are present beyond the initial description. Monitor for updates.

CVE-2004-1904: Undefined Security Weakness

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1905: Undefined Security Weakness

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...