PT-2006-6630 · Panda · Panda Activescan

Published 2006-11-17 · Updated 2018-10-17 · CVE-2006-5967

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Panda ActiveScan versions prior to 5.54.01

Description A race condition exists in the ActiveScan.1 ActiveX control, which is not thread safe, allowing remote attackers to cause memory corruption and execute arbitrary code via multiple invocations of the Analizar method.

Recommendations For versions prior to 5.54.01, update to version 5.54.01 or later to resolve the issue. As a temporary workaround, consider restricting access to the ActiveScan.1 ActiveX control to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-5967

Affected Products

Panda Activescan

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-5967 · Security Note
• http://secunia.com/secunia_research/2006-64/advisory · Vendor Advisory
• http://vupen.com/english/advisories/2006/4536 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30319 · Note
• http://secunia.com/advisories/21763 · Note
• http://securityfocus.com/bid/21132 · Note
• http://securityfocus.com/archive/1/451864/100/0/threaded · Note