EUVD-2004-1897

Malware in sbrugna...

EUVD-2004-1898

Malware in sbrugna...

EUVD-2006-5949

Malware in sbrugna...

EUVD-2006-5950

Malware in sbrugna...

EUVD-2006-4283

Malware in sbrugna...

Panda ActiveScan 5.53 Ascan_6.ASP ActiveX Control Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

Panda ActiveScan 5.0 ASControl.DLL Remote Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10065/info It has been reported that Panda ActiveScan may be prone to a remote heap overflow vulnerability that may allow an attacker to cause a denial of service condition in Internet Explorer or leverage the issue to...

Panda ActiveScan 5.0 ascontrol.dll Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the 'SetSitesFile' is...

Design/Logic Flaw

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote...

CVE-2009-3735

The CVE-2009-3735 entry concerns Panda ActiveScan: the ActiveScan Installer ActiveX control in as2stubie.dll (prior to v1.3.3.0) downloads as2guiie.cab from an arbitrary URL and does not verify the downloaded archive’s digital signature before installation, enabling remote code execution via a UR...

CVE-2009-3735

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote...

Panda Security ActiveScan fails to properly validate downloaded software

Overview Panda ActiveScan fails to properly validate downloaded software, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Panda ActiveScan is an online scanner that is reported to detect malware, vulnerabilities, and unknown threats...

Stack overflow

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

CVE-2008-3155

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

CVE-2008-3156

The CVE-2008-3156 entry affects the Panda ActiveScan product, specifically the ActiveX Control as2guiie.dll, before version 1.02.00. The vulnerability allows remote attackers to download and execute arbitrary CAB files by passing URLs to the Update method, enabling arbitrary code execution on the...

CVE-2008-3155

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

CVE-2008-3156

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3155

CVE-2008-3155 is a stack-based buffer overflow in the ActiveX control as2guiie.dll used by Panda ActiveScan prior to version 1.02.00. An attacker can trigger a crash or arbitrary code execution by sending a long argument to the Update method, enabling remote exploitation. The root cause is a buff...

Panda ActiveScan远程缓冲区溢出和任意CAB文件安装漏洞

BUGTRAQ ID: 30086 CNCAN ID：CNCAN-2008070802 Panda ActiveScan是一款病毒在线扫描程序。 Panda ActiveScan存在缓冲区溢出和CAB文件安装问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 Panda ActiveScan的升级函数对参数缺少检查，可导致典型的缓冲区溢出，并可以安装任意攻击者提供的CABinet到目标系统，导致任意代码或者程序执行。 Panda ActiveScan 2.0 升级到最新版本： http://www.pandasecurity.com/activescan/index/...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...