Panda.Antivirus.ZOO.Archive.Remote.Heap.Overflow
Description
This indicates a possible attempt to exploit a Buffer Overflow vulnerability in Panda Software Antivirus library.
The vulnerability is due to a heap overflow error in the "pskcmp.dll" library that is triggered when analyzing malformed "ZOO" archives. It may be exploited by an unauthenticated remote attacker to execute arbitrary commands and take complete control of an affected system, for example by sending an email containing a specially crafted attachment.
Affected Products
Panda Software BusinesSecure Antivirus
Panda Software CommandlineSecure Antivirus
Panda Software CVPSecure Antivirus
Panda Software DominoSecure Antivirus
Panda Software Enterprise Suite Antivirus
Panda Software ExchangeSecure Antivirus
Panda Software FileSecure Antivirus
Panda Software ISASecure Antivirus
Panda Software PerimeterScan
Panda Software PostfixSecure Antivirus
Panda Software ProxySecure Antivirus
Panda Software Platinum Antivirus
Panda Software QmailSecure Antivirus
Panda Software SendmailSecure Antivirus
Panda Software Small Business Edition Antivirus
Panda Software Titanium Antivirus
Impact
System Compromise: Remote code execution.
Recommended Actions
Antivirus products are updated automatically through the regular update function.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |