熊猫卫士EXE文件解析远程代码执行漏洞

BUGTRAQ ID: 24989 熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 熊猫卫士的文件解析引擎在解析畸形.EXE文件时整数负值过程中存在缓冲区溢出，如果用户受骗打开了恶意的可执行文件的话，就可能触发这个溢出，导致在用户系统上执行任意代码。 Panda Antivirus 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.pandasoftware.com/...

2007-07-20 - n.runs-SA-2007.019 - Panda Antivirus EXE parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.019 20-Jul-2007 Vendor: Panda Software, http://www.pandasoftware.com Affected Products: Panda Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 Initial notification to Panda...

Panda Antivirus integer overflow

Integer overflow leads to buffer overflow on PE .EXE files parsing...

Panda Software AdminSecure Agent Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Panda AdminSecure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AdminSecure agent which binds by default to TCP port 19226 or 19227. When processi...

MPack with virtual hosting and PHP security-vulnerability warning-the black bar safety net

MPack is by a self-proclaimed "Dream Coders Team" of the organization development of the PHP program, which contain a number of the latest exploit code can be used to manipulate the distal end of attacks on Panda Labs at the end of last year when for the first time found that, at the time someone...

Code injection

Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1670

Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1670

Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1670

CVE-2007-1670 affects Panda Software Antivirus before 20070402. The vulnerability allows a remote attacker to trigger a denial of service (infinite loop) by feeding a ZOO archive whose direntry structure points to a previously processed file. Public sources in the connected documents confirm Pand...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5966

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5966

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...

CVE-2006-5966

CVE-2006-5966 affects Panda ActiveScan 5.53.00 and earlier builds up to 5.54.01. The issue arises from two ActiveX controls: ActiveScan.1 Reinicializar allows remote reboot of the system, and PAVPZ.SOS.1 ObtenerTamano allows an attacker to determine arbitrary file existence and size. This is a re...

CVE-2006-5967

CVE-2006-5967 describes a race condition in Panda ActiveScan 5.53.00 and earlier than 5.54.01, where multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control are not thread-safe and can lead to memory corruption and arbitrary code execution remotely. The vulnerability affec...

Panda ActiveScan ActiveX控件多个远程安全漏洞

Panda ActiveScan是熊猫的免费在线病毒扫描工具。 Panda ActiveScan中存在多个远程安全漏洞，具体如下： 1 在调用ActiveScan.1 ActiveX控件的Reinicializar方法时会导致未经用户确认便重启系统。 2 PAVPZ.SOS.1 ActiveX控件的ObtenerTamano方式会返回指定本地文件名的文件大小，这可能允许恶意站点判断是否存在本地文件及相应的文件大小。 3 ActiveScan.1 ActiveX控件的Analizar方法线程不安全，恶意站点可能通过竞争条件破坏内存，执行任意代码。 Panda ActiveScan...

Multiple Panda Antivirus ActiveScan ActiveX security vulnerabilities

Memory corruption, information leak, client PC rebooting...

Re: SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities

Panda is realy great and realy fast. The Bug was also reported at 16.07.06 to the beta team. -------------------- 16.07.06 -------------------- Hi there, i think there are some badly set filesystem permissions in your software. FileSecure 7.01.10 C:ProgrammePanda SoftwareAVNT everybody full acces...

CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

CVE-2006-4657

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying 1 WebProxy.exe or 2 PAVSRV51.EXE...