CVE-2009-3735

CRITICAL 9.3CVE-2009-3735 · Published 11/02/2010 · updated 16/06/2026

In short

CVE-2009-3735 is a CRITICAL (CVSS 9.3) vulnerability affecting panda activescan (panda).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
panda activescan panda	`= 2.0`	No fix yet

Description

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.

References

secunia.com/advisories/38485 · Vendor Advisory
kb.cert.org/vuls/id/869993 · US Government Resource
kb.cert.org/vuls/id/MAPG-7QPKL3
securityfocus.com/bid/38067
vupen.com/english/advisories/2010/0354 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008

More vulnerabilities in panda activescan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

panda activescan

panda

= 2.0

No fix yet

Description

More vulnerabilities in panda activescan

See all →