Pan: Security Vulnerabilities
The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.
CVSS Score
9.3
EPSS Score
0.076
Published
2008-06-02