Out-of-bounds

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...

CVE-2008-1471

The CVE-2008-1471 issue affects Panda Security products using the cpoint.sys kernel driver (Panda Internet Security 2008 and Antivirus+ Firewall 2008). A crafted IOCTL request can trigger an out-of-bounds write in kernel memory, enabling a local attacker to cause a denial of service (system crash...

CVE-2008-1471

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...

Panda Security cpoint.sys Kernel Memory Corruption

A vulnerability in the 'Cpoint.sys' kernel driver shipped with Panda Antivirus+ Firewall 2008 and Panda Internet Security 2008 fails to sufficiently validate IOCTL requests before processing them. A local attacker may be able to leverage this issue to execute arbitrary code with kernel privileges...

熊猫卫士2008 CPoint.sys内存破坏漏洞

BUGTRAQ ID: 28150 熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 多个熊猫系列杀毒软件所捆绑的cpoint.sys内核驱动中处理IOCTL请求的代码存在漏洞，本地攻击者可能利用此漏洞提升权限。 该驱动的0xba002848 IOCTL调用未经充分验证便接受了用户提供的输入，导致越界写入内核内存。 cpoint.sys的反汇编（Windows Vista 32位版）： ... .text:00012633 loc12633: .text:00012633 mov edx, 0BA002848h -- 1 .text:00012638 cmp ecx, edx...

Panda Internet Security / Antivirus memory corruption

cpoint.sys IOCTL processing memory corruption...

[TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability Advisory ID: TKADV2008-001 Revision: 1.0 Release Date: 2008/03/08 Last Modified: 2008/03/08 Date Reported: 2008/01/08 Author: Tobias Kle...