Panda

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-3735 1Panda 1Panda Activescan Apr 29, 2026 Feb 11, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify...Show more The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.Show less
CVE-2008-3156 1Panda 1Panda Activescan Apr 23, 2026 Jul 11, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.
CVE-2008-3155 1Panda 1Panda Activescan Apr 23, 2026 Jul 11, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Updat...Show more Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Update method.Show less
CVE-2008-1471 1Panda 2Panda Antivirus And Firewall Panda Internet Security Apr 23, 2026 Mar 24, 2008 N/A· v4 N/A· v3 7.2 HIGH· v2 The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted...Show more The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.Show less
CVE-2007-4191 1Panda 1Panda Antivirus Apr 23, 2026 Aug 8, 2007 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified f...Show more Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.Show less
CVE-2007-3969 1Panda 1Panda Antivirus Apr 23, 2026 Jul 25, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."
CVE-2007-3026 1Panda 1Adminsecure Apr 23, 2026 Jul 25, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow.
CVE-2007-1673 9Amavis Avas!tAvira+6 more 13Amavis AntivirAntivir Personal+10 more Apr 23, 2026 May 9, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
CVE-2007-1670 1Panda 6Panda Activescan Panda AntivirusPanda Platinum 2006 Internet Security+3 more Apr 23, 2026 May 9, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
CVE-2006-5967 1Panda 1Activescan Apr 23, 2026 Nov 17, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Anal...Show more Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe.Show less
CVE-2006-5966 1Panda 1Activescan Apr 23, 2026 Nov 17, 2006 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence...Show more Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control.Show less
CVE-2006-4659 1Panda 1Panda Platinum Internet Security Apr 16, 2026 Sep 9, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam...Show more The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability.Show less
CVE-2006-4658 1Panda 1Panda Platinum Internet Security Apr 16, 2026 Sep 9, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine m...Show more Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.Show less
CVE-2006-4657 1Panda 1Panda Platinum Internet Security Apr 16, 2026 Sep 9, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by m...Show more Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.Show less
CVE-2006-4295 1Panda 1Panda Activescan Apr 16, 2026 Aug 23, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
CVE-2005-3922 1Panda 19Panda Activescan Panda AntivirusPanda Antivirus Platinum+16 more Apr 16, 2026 Nov 30, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive.
CVE-2005-3380 1Panda 1Titanium 2005 Apr 16, 2026 Oct 30, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE,...Show more Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."Show less
CVE-2004-1905 1Panda 1Activescan Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function.
CVE-2004-1904 1Panda 1Activescan Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string.
CVE-2001-1149 1Panda 1Panda Antivirus Platinum Apr 16, 2026 Aug 21, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.

12 Next