CVE-2005-3922 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Activescan

3 documents3 sources

Severity

7.5HIGHNVD

EPSS

5.6%

top 9.66%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Panda Activescan Panda Antivirus Panda Antivirus Platinum +2 more

Timeline

PublishedNov 30

Latest updateMay 1

Description

Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages5 packages

▶NVDpanda/panda_antivirus2.0

▶NVDpanda/panda_antivirus_platinum2.0

▶NVDpanda/panda_security3.0

▶NVDpanda/panda_activescan5.0

▶NVDpanda/panda_truprevent_personal2005, 2006+1

🔴Vulnerability Details

GHSA

GHSA-xwq2-3qq4-3p6h: Heap-based buffer overflow in pskcmp↗2022-05-01

▶

CVEList

CVE-2005-3922: Heap-based buffer overflow in pskcmp↗2005-11-30

▶