CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.

• pan pan (<= 0.132) • pan pan 0.105 • pan pan 0.106 • pan pan 0.107 • pan pan 0.108 • pan pan 0.109 • pan pan 0.110 • pan pan 0.111 • pan pan 0.112 • pan pan 0.113 • pan pan 0.114 • pan pan 0.115 • pan pan 0.116 • pan pan 0.117 • pan pan 0.118 • pan pan 0.119 • pan pan 0.120 • pan pan 0.121 • pan pan 0.122 • pan pan 0.123 • pan pan 0.124 • pan pan 0.125 • pan pan 0.126 • pan pan 0.127 • pan pan 0.128 • pan pan 0.129 • pan pan 0.130 • pan pan 0.131