Panda vulnerabilities
22 vulnerabilities
Known vulnerabilities in Panda products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 26 products.
Products
26- Panda Activescan6 vulnerabilities
- Panda Antivirus5 vulnerabilities
- Activescan4 vulnerabilities
- Panda Platinum Internet Security3 vulnerabilities
- Panda Security3 vulnerabilities
- Panda Antivirus And Firewall2 vulnerabilities
- Panda Antivirus Platinum2 vulnerabilities
- Adminsecure1 vulnerabilities
- Panda Internet Security1 vulnerabilities
- Panda Truprevent Personal1 vulnerabilities
- Titanium 20051 vulnerabilities
- Panda Businessecure Antivirus0 vulnerabilities
- Panda Clientshield With Truprevent Technologies0 vulnerabilities
- Panda Enterprisecure With Truprevent Technologies0 vulnerabilities
- Panda Exchangesecure0 vulnerabilities
- Panda Filesecure0 vulnerabilities
- Panda Filesecure With Truprevent Technologies0 vulnerabilities
- Panda Gatedefender0 vulnerabilities
- Panda Isa Secure0 vulnerabilities
- Panda Panda Enterprisecure Antivirus0 vulnerabilities
- Panda Platinum 2006 Internet Security0 vulnerabilities
- Panda Platinum 2007 Internet Security0 vulnerabilities
- Panda Titanium0 vulnerabilities
- Panda Titanium 2005 Antivirus0 vulnerabilities
- Panda Titanium 2006 Antivirus \+ Antispyware0 vulnerabilities
- Panda Webadmin0 vulnerabilities
CVE-2007-1670pandapanda_activescan+1
EPSS score3.01%
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.CVE-2007-1673amavisamavis+10EPSS score3.18%
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.CVE-2007-4191pandapanda_antivirusEPSS score0.76%
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.CVE-2007-3026pandaadminsecureEPSS score9.47%
Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow.CVE-2001-1149pandapanda_antivirus_platinumEPSS score1.33%
Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.CVE-2005-3380pandatitanium_2005EPSS score1.41%
Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."CVE-2005-3922pandapanda_activescan+4EPSS score5.55%
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive.CVE-2008-1471pandapanda_antivirus_and_firewall+1EPSS score1.13%
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.CVE-2008-3155pandapanda_activescanEPSS score7.71%
Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Update method.CVE-2008-3156pandapanda_activescanEPSS score4.07%
The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.CVE-2000-0264pandapanda_securityEPSS score0.72%
Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods.CVE-2000-0265pandapanda_securityEPSS score0.46%
Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.CVE-2000-0541pandapanda_antivirusEPSS score0.66%
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.CVE-2004-1905pandaactivescanEPSS score1.69%
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function.CVE-2004-1904pandaactivescanEPSS score4.92%
Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string.CVE-2009-3735pandapanda_activescanEPSS score5.74%
The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.CVE-2006-4658pandapanda_platinum_internet_securityEPSS score2.11%
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.CVE-2006-4657pandapanda_platinum_internet_securityEPSS score0.37%
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.CVE-2006-4295pandapanda_activescanEPSS score1.77%
Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter.CVE-2006-4659pandapanda_platinum_internet_securityEPSS score2.09%
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability.