GCVE-110-CERTCC-2009-869993

Advisory PublishedCVSS 0.0/10

Vulnetix · Advisory published February 9, 2010

Panda ActiveScan fails to properly validate downloaded software, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Download JSON Open in Console

Risk Scores

CVSS 2.0

0.0/10

None · AV:--/AC:--/Au:--/C:--/I:--/A:--

certcc-cam

impact15population8exploitation0widely_known2score_current9.234ease_of_exploitation19

certcc-vrda

d1_impact4d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score0remediation_levelNot Defined (ND)report_confidenceNot Defined (ND)environmental_score0target_distributionNot Defined (ND)environmental_vectorCDP:Not Defined (ND)/TD:Not Defined (ND)/CR:Not Defined (ND)/IR:Not Defined (ND)/AR:Not Defined (ND)

Aliases

CVE-2009-3735

References

Panda Security ActiveScan fails to properly validate downloaded software

url

Panda Security ActiveScan fails to properly validate downloaded software

url

Panda Security ActiveScan fails to properly validate downloaded software

advisory

Panda Security ActiveScan fails to properly validate downloaded software

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON