50 matches found
CVE-2008-3155
Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...
CVE-2008-3155
CVE-2008-3155 is a stack-based buffer overflow in the ActiveX control as2guiie.dll used by Panda ActiveScan prior to version 1.02.00. An attacker can trigger a crash or arbitrary code execution by sending a long argument to the Update method, enabling remote exploitation. The root cause is a buff...
Panda ActiveScan远程缓冲区溢出和任意CAB文件安装漏洞
BUGTRAQ ID: 30086 CNCAN ID：CNCAN-2008070802 Panda ActiveScan是一款病毒在线扫描程序。 Panda ActiveScan存在缓冲区溢出和CAB文件安装问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 Panda ActiveScan的升级函数对参数缺少检查，可导致典型的缓冲区溢出，并可以安装任意攻击者提供的CABinet到目标系统，导致任意代码或者程序执行。 Panda ActiveScan 2.0 升级到最新版本： http://www.pandasecurity.com/activescan/index/...
Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow
Panda Security ActiveScan 2.0 Update - Remote Buffer Overflow Author: Karol Wiesek Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet...
Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow
Author: Karol Wiesek Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet into victims system Panda Security have not respond in any...
Panda Security ActiveScan 2.0 (Update) Remote BOF Exploit
Exploit for unknown platform in category remote exploits ========================================================= Panda Security ActiveScan 2.0 Update Remote BOF Exploit ========================================================= Author: Karol Wiesek There exists two vulnerabilities in Panda...
CVE-2006-5967
Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...
CVE-2006-5966
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...
CVE-2006-5967
Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...
CVE-2006-5966
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...
CVE-2006-5966
CVE-2006-5966 affects Panda ActiveScan 5.53.00 and earlier builds up to 5.54.01. The issue arises from two ActiveX controls: ActiveScan.1 Reinicializar allows remote reboot of the system, and PAVPZ.SOS.1 ObtenerTamano allows an attacker to determine arbitrary file existence and size. This is a re...
CVE-2006-5967
CVE-2006-5967 describes a race condition in Panda ActiveScan 5.53.00 and earlier than 5.54.01, where multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control are not thread-safe and can lead to memory corruption and arbitrary code execution remotely. The vulnerability affec...
Panda ActiveScan ActiveX控件多个远程安全漏洞
Panda ActiveScan是熊猫的免费在线病毒扫描工具。 Panda ActiveScan中存在多个远程安全漏洞，具体如下： 1 在调用ActiveScan.1 ActiveX控件的Reinicializar方法时会导致未经用户确认便重启系统。 2 PAVPZ.SOS.1 ActiveX控件的ObtenerTamano方式会返回指定本地文件名的文件大小，这可能允许恶意站点判断是否存在本地文件及相应的文件大小。 3 ActiveScan.1 ActiveX控件的Analizar方法线程不安全，恶意站点可能通过竞争条件破坏内存，执行任意代码。 Panda ActiveScan...
Multiple Panda Antivirus ActiveScan ActiveX security vulnerabilities
Memory corruption, information leak, client PC rebooting...
CVE-2006-4295
Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2006-4295
CVE-2006-4295 describes a cross-site scripting (XSS) vulnerability in Panda ActiveScan 5.53.00, specifically in the ascan_6.asp endpoint. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the email parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Med...
CVE-2006-4295
Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
Panda ActiveScan 5.53 - Ascan_6.asp ActiveX Control Cross-Site Scripting
Panda ActiveScan 5.53 - Ascan6.asp ActiveX Control Cross-Site Scripting source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting
source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...