PT-2006-6630 · Panda · Panda Activescan

Publicado 2006-11-17 · Atualizado 2018-10-17 · CVE-2006-5967

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Panda ActiveScan versions prior to 5.54.01

Description A race condition exists in the ActiveScan.1 ActiveX control, which is not thread safe, allowing remote attackers to cause memory corruption and execute arbitrary code via multiple invocations of the Analizar method.

Recommendations For versions prior to 5.54.01, update to version 5.54.01 or later to resolve the issue. As a temporary workaround, consider restricting access to the ActiveScan.1 ActiveX control to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-5967

Produtos afetados

Panda Activescan

Referências · 7

• http://vupen.com/english/advisories/2006/4536 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30319 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5967 · Nota de Segurança
• http://secunia.com/secunia_research/2006-64/advisory · Aviso do Fabricante
• http://secunia.com/advisories/21763 · Nota
• http://securityfocus.com/bid/21132 · Nota
• http://securityfocus.com/archive/1/451864/100/0/threaded · Nota