Lucene search

[email protected]CVE-2008-1471

HistoryMar 24, 2008 - 10:44 p.m.

CVE-2008-1471

2008-03-2422:44:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2008-1471

cpoint.sys

panda internet security 2008

antivirus+ firewall 2008

denial of service

kernel panic

memory overwrite

arbitrary code

ioctl request

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.

Affected configurations

NVD

Node

microsoftwindows-ntMatchvistax32

microsoftwindows-ntMatchxpx32

microsoftwindows_2000pro

microsoftwindows_vistax64

microsoftwindows_xpx64

AND

pandapanda_antivirus_and_firewallMatch2008

pandapanda_internet_securityMatch2008

CPENameOperatorVersion
panda:panda_antivirus_and_firewallpanda panda antivirus and firewalleq2008
panda:panda_internet_securitypanda panda internet securityeq2008

CPE	Name	Operator	Version
panda:panda_antivirus_and_firewall	panda panda antivirus and firewall	eq	2008
panda:panda_internet_security	panda panda internet security	eq	2008

References

secunia.com/advisories/29311

www.pandasecurity.com/homeusers/support/card?id=41231&idIdioma=2&ref=ProdExp

www.pandasecurity.com/homeusers/support/card?id=41337&idIdioma=2&ref=ProdExp

www.securityfocus.com/archive/1/489292/100/0/threaded

www.securityfocus.com/bid/28150

www.securitytracker.com/id?1019568

www.trapkit.de/advisories/TKADV2008-001.txt

www.vupen.com/english/advisories/2008/0801/references

exchange.xforce.ibmcloud.com/vulnerabilities/41079

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2008-1471

cvelist1 nvd1 nessus1 prion1