Unscored severity · published Jul 25, 2007
CVE-2007-3969
Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."
–
CVSS
5.7%
EPSS
No
On KEV
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Panda Antivirus · Panda
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3969
Vendor Advisory
http://secunia.com/advisories/26171
securityreason.com
http://securityreason.com/securityalert/2920
www.nruns.com
http://www.nruns.com/%5Bn.runs-SA-2007.019%5D%20-%20Panda%20Antivirus%20EXE%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf
www.nruns.com
http://www.nruns.com/%5Bn.runs-SA-2007.019%5D%20-%20Panda%20Antivirus%20EXE%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/474247/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/24989
More from Panda Antivirus
–
CVE-2007-4191
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by…
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2007-1670
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous…
–
CVE-2005-3922
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive
–
CVE-2000-0541
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command