NVD

Id
50918  
Name
CVE-2009-3735  
Description
The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive"s digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-02-11  
Modified Date
2010-11-03  
Seq
2009-3735  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257861 50918 CVE-2009-3735 VU#869993  View
257862 50918 CVE-2009-3735 http://www.kb.cert.org/vuls/id/MAPG-7QPKL3  View
257863 50918 CVE-2009-3735 MS10-008  View
257864 50918 CVE-2009-3735 38067  View
257865 50918 CVE-2009-3735 ADV-2010-0354  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35366 JVNDB-2010-001146 Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題 Panda ActiveScan は、ウイルスやスパイウェアなどをオンラインでスキャンする製品です。 CVE-2009-3735 41166 CVE-2009-3735 50918 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001146.html 2010-02-12 2010-03-12 View