CVE-2008-3156

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.07%

Published

Jul 11, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBPanda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.

Weaknesses (CWE)

CWE-264

Affected Products (1)

panda · panda_activescanvulnerable

References (18)

http://karol.wiesek.pl/files/panda.tgz

Exploit

http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html

http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html

http://secunia.com/advisories/30841

Vendor Advisory

http://www.securityfocus.com/bid/30086

http://www.securitytracker.com/id?1020432

http://www.vupen.com/english/advisories/2008/2008/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/43587

https://www.exploit-db.com/exploits/6004