9.3

CVE-2008-3156

Exploit
The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Panda ≫ Panda Activescan Version2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.07% 0.894
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://karol.wiesek.pl/files/panda.tgz
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html
http://secunia.com/advisories/30841
Vendor Advisory
http://www.securityfocus.com/bid/30086
http://www.securitytracker.com/id?1020432
http://www.vupen.com/english/advisories/2008/2008/references
https://www.exploit-db.com/exploits/6004
https://exchange.xforce.ibmcloud.com/vulnerabilities/43587