CVE-2006-5967: Undefined Security Weakness

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

CVE-2006-5966: Undefined Security Weakness

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to 1 reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or 2 determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control...

Multiple Panda Antivirus ActiveScan ActiveX security vulnerabilities

Memory corruption, information leak, client PC rebooting...

Re: SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities

Panda is realy great and realy fast. The Bug was also reported at 16.07.06 to the beta team. -------------------- 16.07.06 -------------------- Hi there, i think there are some badly set filesystem permissions in your software. FileSecure 7.01.10 C:ProgrammePanda SoftwareAVNT everybody full acces...

CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

CVE-2006-4657

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying 1 WebProxy.exe or 2 PAVSRV51.EXE...

CVE-2006-4657

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying 1 WebProxy.exe or 2 PAVSRV51.EXE...

CVE-2006-4657

CVE-2006-4657 affects Panda Platinum Internet Security 2006/2007 builds; it stores service executables under the product installation directory with weak permissions. This allows a local attacker to escalate to LocalSystem by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE, enabling privilege esca...

CVE-2006-4658

The CVE-2006-4658 issue affects Panda Platinum Internet Security 2006 (10.02.01) and 2007 (11.00.00). The root cause is the use of sequential message numbers in generated URLs that are not filtered when a user replies to a message, which could allow remote attackers to infer mail usage patterns. ...

CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

CVE-2006-4658: Undefined Security Weakness

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

CVE-2006-4657: Undefined Security Weakness

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying 1 WebProxy.exe or 2 PAVSRV51.EXE...

CVE-2006-4659

The CVE-2006-4659 entry concerns Panda Platinum Internet Security 2006 (10.02.01) and 2007 (11.00.00), where predictable URLs used for per-message spam classification can be triggered by a malicious web page containing IMG tags to have Panda classify arbitrary messages as spam. This is a potentia...

CVE-2006-4659

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this...

CVE-2006-4659: Undefined Security Weakness

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this...

SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities

Noise: We have more and more application to secure our networks. Does it means network becomes more and more secure? No, there is a limit. Because any application has vulnerabilities. For in much security is much grief: and he that increaseth code increaseth bugs 1. Title: Panda Platinum Internet...

CVE-2006-4295

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2006-4295

CVE-2006-4295 describes a cross-site scripting (XSS) vulnerability in Panda ActiveScan 5.53.00, specifically in the ascan_6.asp endpoint. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the email parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Med...

CVE-2006-4295: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ascan6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting

source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...