CVE-2006-4659
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG…
Does this matter?
Lower severity and a low EPSS score (2.05%). Track it; it rarely justifies an emergency change on its own.
Description
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.05% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- panda/panda platinum internet security
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21769
- http://securityreason.com/securityalert/1524
- http://www.security.nnov.ru/advisories/pandais.aspVendor Advisory
- http://www.securityfocus.com/archive/1/445479/100/0/threaded
- http://www.securityfocus.com/bid/19891
- http://secunia.com/advisories/21769
- http://securityreason.com/securityalert/1524
- http://www.security.nnov.ru/advisories/pandais.aspVendor Advisory
- http://www.securityfocus.com/archive/1/445479/100/0/threaded
- http://www.securityfocus.com/bid/19891
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.