CVE-2009-3735
published 2010-02-11CVE-2009-3735: The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.74%
92.1th percentile
The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| panda | panda_activescan | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/38485http://www.kb.cert.org/vuls/id/869993http://www.kb.cert.org/vuls/id/MAPG-7QPKL3http://www.securityfocus.com/bid/38067http://www.vupen.com/english/advisories/2010/0354https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008http://secunia.com/advisories/38485http://www.kb.cert.org/vuls/id/869993http://www.kb.cert.org/vuls/id/MAPG-7QPKL3http://www.securityfocus.com/bid/38067http://www.vupen.com/english/advisories/2010/0354https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008
2010-02-11
Published