CVE-2008-3156

CRITICAL 9.3CVE-2008-3156 · Published 11/07/2008 · updated 16/06/2026

In short

CVE-2008-3156 is a CRITICAL (CVSS 9.3) vulnerability affecting panda activescan (panda).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
panda activescan panda	`= 2.0`	No fix yet

Description

The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.

References

karol.wiesek.pl/files/panda.tgz · Exploit
lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html
lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html
secunia.com/advisories/30841 · Vendor Advisory
securityfocus.com/bid/30086
securitytracker.com/id
vupen.com/english/advisories/2008/2008/references
exchange.xforce.ibmcloud.com/vulnerabilities/43587
exploit-db.com/exploits/6004

More vulnerabilities in panda activescan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

panda activescan

panda

= 2.0

No fix yet

More vulnerabilities in panda activescan

See all →