Vulnerabilities > CVE-2006-5967 - Remote vulnerability in Panda ActiveScan ActiveX Controls

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
panda

Summary

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe. This vulnerability is addressed in the following product release: Panda, ActiveScan, 5.54.01

Vulnerable Configurations

Part Description Count
Application
Panda
2