Panda.Antivirus.ZOO.Archive.Remote.Heap.Overflow

description-logoDescription

This indicates a possible attempt to exploit a Buffer Overflow vulnerability in Panda Software Antivirus library.
The vulnerability is due to a heap overflow error in the "pskcmp.dll" library that is triggered when analyzing malformed "ZOO" archives. It may be exploited by an unauthenticated remote attacker to execute arbitrary commands and take complete control of an affected system, for example by sending an email containing a specially crafted attachment.

affected-products-logoAffected Products

Panda Software BusinesSecure Antivirus
Panda Software CommandlineSecure Antivirus
Panda Software CVPSecure Antivirus
Panda Software DominoSecure Antivirus
Panda Software Enterprise Suite Antivirus
Panda Software ExchangeSecure Antivirus
Panda Software FileSecure Antivirus
Panda Software ISASecure Antivirus
Panda Software PerimeterScan
Panda Software PostfixSecure Antivirus
Panda Software ProxySecure Antivirus
Panda Software Platinum Antivirus
Panda Software QmailSecure Antivirus
Panda Software SendmailSecure Antivirus
Panda Software Small Business Edition Antivirus
Panda Software Titanium Antivirus

Impact logoImpact

System Compromise: Remote code execution.

recomended-action-logoRecommended Actions

Antivirus products are updated automatically through the regular update function.

Coverage

IPS (Regular DB)
IPS (Extended DB)