888 matches found
Out-of-bounds
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...
CVE-2008-1471
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...
CVE-2008-1471
The CVE-2008-1471 issue affects Panda Security products using the cpoint.sys kernel driver (Panda Internet Security 2008 and Antivirus+ Firewall 2008). A crafted IOCTL request can trigger an out-of-bounds write in kernel memory, enabling a local attacker to cause a denial of service (system crash...
CVE-2008-1471
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...
CVE-2008-1471: Undefined Security Weakness
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...
Panda Security cpoint.sys Kernel Memory Corruption
A vulnerability in the 'Cpoint.sys' kernel driver shipped with Panda Antivirus+ Firewall 2008 and Panda Internet Security 2008 fails to sufficiently validate IOCTL requests before processing them. A local attacker may be able to leverage this issue to execute arbitrary code with kernel privileges...
熊猫卫士2008 CPoint.sys内存破坏漏洞
BUGTRAQ ID: 28150 熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 多个熊猫系列杀毒软件所捆绑的cpoint.sys内核驱动中处理IOCTL请求的代码存在漏洞，本地攻击者可能利用此漏洞提升权限。 该驱动的0xba002848 IOCTL调用未经充分验证便接受了用户提供的输入，导致越界写入内核内存。 cpoint.sys的反汇编（Windows Vista 32位版）： ... .text:00012633 loc12633: .text:00012633 mov edx, 0BA002848h -- 1 .text:00012638 cmp ecx, edx...
[TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability Advisory ID: TKADV2008-001 Revision: 1.0 Release Date: 2008/03/08 Last Modified: 2008/03/08 Date Reported: 2008/01/08 Author: Tobias Kle...
Panda Internet Security / Antivirus memory corruption
cpoint.sys IOCTL processing memory corruption...
Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption
source: https://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate IOCTL requests. Local users may...
Design/Logic Flaw
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...
CVE-2007-4191
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...
CVE-2007-4191
CVE-2007-4191 affects Panda antivirus products (e.g., Panda Platinum Internet Security 2006/2007) where service executables are stored in the installation directory with weak permissions. The vulnerability allows local users to elevate privileges to LocalSystem by modifying executable files such ...
CVE-2007-4191
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...
CVE-2007-4191: Undefined Security Weakness
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...
pandaav-local.txt
/ Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda Antivirus 2008 Not Affected Products: - Panda...
熊猫卫士不安全文件访问权限漏洞
BUGTRAQ ID: 25186 熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 熊猫卫士以不安全访问权限安装系统文件，本地攻击者可能利用此漏洞提升自己的权限，获取系统的完全控制。 在安装熊猫卫士2008时默认将安装文件夹%ProgramFiles%\Panda Security\Panda Antivirus 2008\的权限设置成了Everyone:Full...
Panda Antivirus 2008 Local Privilege Escalation Exploit
No description provided by source. / Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/...
Panda Antivirus 2008 Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ======================================================= Panda Antivirus 2008 Local Privilege Escalation Exploit ======================================================= / Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local...
Panda AntiVirus 2008 - Local Privilege Escalation
/ Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda Antivirus 2008 Not Affected Products: - Panda...