Unscored severity · published Nov 17, 2006
CVE-2006-5967
Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activescan · Panda
5.0; 5.53.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5967
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5967
secunia.com
http://secunia.com/advisories/21763
Patch
http://secunia.com/secunia_research/2006-64/advisory/
www.securityfocus.com
http://www.securityfocus.com/archive/1/451864/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21132
www.vupen.com
http://www.vupen.com/english/advisories/2006/4536
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30319
More from Activescan
–
CVE-2006-5966
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control,…
–
CVE-2004-1904
Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string
–
CVE-2004-1905
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function