CVE-2006-5967 - Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attacke

CVE-2006-5967

Summary

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe. This vulnerability is addressed in the following product release: Panda, ActiveScan, 5.54.01

References

Vulnerable Configurations

cpe:2.3:a:panda:activescan:5.0:*:*:*:*:*:*:*
cpe:2.3:a:panda:activescan:5.0:*:*:*:*:*:*:*
cpe:2.3:a:panda:activescan:5.53.00:*:*:*:*:*:*:*
cpe:2.3:a:panda:activescan:5.53.00:*:*:*:*:*:*:*

CVSS

Base:	5.1 (as of 17-10-2018 - 21:46)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:P/A:P

refmap via4

bid	21132
bugtraq	20061116 Secunia Research: Panda ActiveScan Multiple Vulnerabilities
misc	http://secunia.com/secunia_research/2006-64/advisory/
secunia	21763
vupen	ADV-2006-4536
xf	pandaactivescan-activescan-code-execution(30319)

Last major update

17-10-2018 - 21:46

Published

17-11-2006 - 22:07

Last modified

17-10-2018 - 21:46