Lucene search

PRIOn knowledge basePRION:CVE-2014-5307

HistoryAug 26, 2014 - 2:55 p.m.

Heap overflow

2014-08-2614:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.

CPENameOperatorVersion
panda_av_pro_2014eq13.01.01
panda_global_protection_2014eq7.01.01
panda_internet_security_2014eq19.01.01

Name	Operator	Version
panda_av_pro_2014	eq	13.01.01
panda_global_protection_2014	eq	7.01.01
panda_internet_security_2014	eq	19.01.01

References

packetstormsecurity.com/files/127948/Panda-Security-2014-Privilege-Escalation.html

seclists.org/fulldisclosure/2014/Aug/53

www.securityfocus.com/archive/1/533182/100/0/threaded

www.securityfocus.com/bid/69293

exchange.xforce.ibmcloud.com/vulnerabilities/95382

www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5307/

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2014-5307