Panda
24 CVEs across 26 Panda products. Browse Panda vulnerabilities, severities, and proof-of-concept exploits.
Panda products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-3735 | | 2010-02-11 | The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie… | |
CVE-2008-3156 | | 2008-07-11 | The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files… | |
CVE-2008-3155 | | 2008-07-11 | Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (cras… | |
CVE-2008-1471 | | 2008-03-24 | The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel pani… | |
CVE-2007-4191 | | 2007-08-08 | Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSyste… | |
CVE-2007-3969 | | 2007-07-25 | Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Ar… | |
CVE-2007-3026 | | 2007-07-25 | Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 1… | |
CVE-2007-1673 | | 2007-05-09 | unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archiv… | |
CVE-2007-1670 | | 2007-05-09 | Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that… | |
CVE-2006-5967 | | 2006-11-17 | Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code vi… | |
CVE-2006-5966 | | 2006-11-17 | Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan… | |
CVE-2006-4659 | | 2006-09-09 | The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote att… | |
CVE-2006-4658 | | 2006-09-09 | Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to… | |
CVE-2006-4657 | | 2006-09-09 | Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, w… | |
CVE-2006-4295 | | 2006-08-23 | Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the emai… | |
CVE-2005-3922 | | 2005-11-30 | Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive. | |
CVE-2005-3380 | | 2005-10-30 | Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ… | |
CVE-2005-3230 | | 2005-10-14 | Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a spec… | |
CVE-2004-1905 | | 2004-12-31 | ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function. | |
CVE-2004-1904 | | 2004-12-31 | Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long st… | |
CVE-2001-1149 | | 2001-08-21 | Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed… | |
CVE-2000-0541 | | 2000-06-17 | The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command. | |
CVE-2000-0265 | | 2000-04-17 | Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet. | |
CVE-2000-0264 | | 2000-04-17 | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other method… |