Multiple Panda Antivirus ActiveScan ActiveX security vulnerabilities

Memory corruption, information leak, client PC rebooting...

CVE-2006-4295

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2006-4295

CVE-2006-4295 describes a cross-site scripting (XSS) vulnerability in Panda ActiveScan 5.53.00, specifically in the ascan_6.asp endpoint. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the email parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Med...

CVE-2006-4295

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2006-4295: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Panda ActiveScan 5.53 - Ascan_6.asp ActiveX Control Cross-Site Scripting

Panda ActiveScan 5.53 - Ascan6.asp ActiveX Control Cross-Site Scripting source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting

source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...

CVE-2004-1905

Panda ActiveScan 5.0 is affected through ascontrol.dll; the issue enables remote DoS by calling SetSitesFile, causing a crash. No additional exploitation details or fixes are provided in the available documents.

CVE-2004-1904

Technical details about CVE-2004-1904 are not provided in the supplied documents; no publicly accessible specifics (affected product, root cause, or remediation) are present beyond the initial description. Monitor for updates.

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1904: Undefined Security Weakness

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1905: Undefined Security Weakness

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1905

ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service crash by calling the SetSitesFile function...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S)

Application: Panda ActiveScan Vendors: http://www.activescan.com http://www.pandasoftware.com/activescan/com/activescanprincipal.htm Version: 5.0 Platforms: Windows Bug: Buffer Overflow and A CrashD.O.S Risk: High - Running Arbitary Code At SYSTEM Level Exploitation: Remote with browser Date: 1 A...

Panda ActiveScan 5.0 - ascontrol.dll Remote Heap Overflow

Panda ActiveScan 5.0 - ascontrol.dll Remote Heap Overflow source: https://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or...

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the...

Panda ActiveScan 5.0 - 'ascontrol.dll' Denial of Service

source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the 'SetSitesFile' is called in combination with setting t...

Panda ActiveScan 5.0 - 'ascontrol.dll' Remote Heap Overflow

source: https://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or leverage the issue to execute arbitrary code. The issue is...