CVE-2006-5967: Race Condition

Published Nov 17, 2006

Updated

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe.

Affected Software

2 affected components

Panda ActiveScan=5.53.00

Panda ActiveScan=5.0

Remediation

Patch Available

http://secunia.com/secunia_research/2006-64/advisory/

Event History

Nov 17, 2006

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Data Sourced

via NVD·10:07 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5967?

CVE-2006-5967 is considered to have a moderate severity level due to the potential for remote code execution.

How do I fix CVE-2006-5967?

To mitigate CVE-2006-5967, upgrade to Panda ActiveScan version 5.54.01 or later.

Who is affected by CVE-2006-5967?

Users of Panda ActiveScan versions 5.0 and 5.53.00 are specifically affected by CVE-2006-5967.

What type of vulnerability is CVE-2006-5967?

CVE-2006-5967 is a race condition vulnerability that can lead to memory corruption.

What are the potential impacts of CVE-2006-5967?

The potential impacts of CVE-2006-5967 include memory corruption and execution of arbitrary code by remote attackers.