EUVD-2007-4174

Malware in sbrugna...

Design/Logic Flaw

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...

CVE-2006-4657

CVE-2006-4657 affects Panda Platinum Internet Security 2006/2007 builds; it stores service executables under the product installation directory with weak permissions. This allows a local attacker to escalate to LocalSystem by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE, enabling privilege esca...