CVE-2008-3156 The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update...
HighCVSS 9.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| panda activescan | = 2.0 | No fix listed |
References
- karol.wiesek.pl exploit
- 20080705 Panda ActiveScan 2.0 remote code execution mailing-list
- 20080704 Panda ActiveScan 2.0 remote code execution mailing-list
- 30841 third-party-advisory vendor-advisory
- 30086 vdb-entry
- 1020432 vdb-entry
- ADV-2008-2008 vdb-entry
- panda-activescan-file-download(43587) vdb-entry
- 6004 exploit