CVE-2009-3735

Publicada em 11 fev 2010 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.7%

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.

Produtos afetados

n/a · n/a

Referências

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008 http://secunia.com/advisories/38485 http://www.kb.cert.org/vuls/id/869993 http://www.kb.cert.org/vuls/id/MAPG-7QPKL3 http://www.securityfocus.com/bid/38067 http://www.vupen.com/english/advisories/2010/0354