Description
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control.
References
- pandaactivescan-pavpz-info-disclosure(30318) vdb-entry
- 21763 third-party-advisory
- 21132 vdb-entry
- http://secunia.com/secunia_research/2006-64/advisory/
- ADV-2006-4536 vdb-entry
- 20061116 Secunia Research: Panda ActiveScan Multiple Vulnerabilities mailing-list
- pandaactivescan-activescan-dos(30317) vdb-entry