Panda ActiveScan远程缓冲区溢出和任意CAB文件安装漏洞

BUGTRAQ ID: 30086 CNCAN ID：CNCAN-2008070802 Panda ActiveScan是一款病毒在线扫描程序。 Panda ActiveScan存在缓冲区溢出和CAB文件安装问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 Panda ActiveScan的升级函数对参数缺少检查，可导致典型的缓冲区溢出，并可以安装任意攻击者提供的CABinet到目标系统，导致任意代码或者程序执行。 Panda ActiveScan 2.0 升级到最新版本： http://www.pandasecurity.com/activescan/index/...

Panda Security ActiveScan 2.0 (Update) Remote BOF Exploit

No description provided by source. Author: Karol Wiesek karol at wiesek dizd0t pl Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet...

Panda Security ActiveScan 2.0 (Update) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================= Panda Security ActiveScan 2.0 Update Remote BOF Exploit ========================================================= Author: Karol Wiesek There exists two vulnerabilities in Panda...

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

Panda Security ActiveScan 2.0 Update - Remote Buffer Overflow Author: Karol Wiesek Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet...

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

Author: Karol Wiesek Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet into victims system Panda Security have not respond in any...

Out-of-bounds

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...

CVE-2008-1471

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...

CVE-2008-1471

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service system crash or kernel panic, overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory...

CVE-2008-1471

The CVE-2008-1471 issue affects Panda Security products using the cpoint.sys kernel driver (Panda Internet Security 2008 and Antivirus+ Firewall 2008). A crafted IOCTL request can trigger an out-of-bounds write in kernel memory, enabling a local attacker to cause a denial of service (system crash...

Panda Security cpoint.sys Kernel Memory Corruption

A vulnerability in the 'Cpoint.sys' kernel driver shipped with Panda Antivirus+ Firewall 2008 and Panda Internet Security 2008 fails to sufficiently validate IOCTL requests before processing them. A local attacker may be able to leverage this issue to execute arbitrary code with kernel privileges...

熊猫卫士2008 CPoint.sys内存破坏漏洞

BUGTRAQ ID: 28150 熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 多个熊猫系列杀毒软件所捆绑的cpoint.sys内核驱动中处理IOCTL请求的代码存在漏洞，本地攻击者可能利用此漏洞提升权限。 该驱动的0xba002848 IOCTL调用未经充分验证便接受了用户提供的输入，导致越界写入内核内存。 cpoint.sys的反汇编（Windows Vista 32位版）： ... .text:00012633 loc12633: .text:00012633 mov edx, 0BA002848h -- 1 .text:00012638 cmp ecx, edx...

[TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability Advisory ID: TKADV2008-001 Revision: 1.0 Release Date: 2008/03/08 Last Modified: 2008/03/08 Date Reported: 2008/01/08 Author: Tobias Kle...

Panda Internet Security / Antivirus memory corruption

cpoint.sys IOCTL processing memory corruption...

Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption

source: https://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate IOCTL requests. Local users may...

Design/Logic Flaw

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...

CVE-2007-4191

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...

CVE-2007-4191

CVE-2007-4191 affects Panda antivirus products (e.g., Panda Platinum Internet Security 2006/2007) where service executables are stored in the installation directory with weak permissions. The vulnerability allows local users to elevate privileges to LocalSystem by modifying executable files such ...

CVE-2007-4191

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...

pandaav-local.txt

/ Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda Antivirus 2008 Not Affected Products: - Panda...

熊猫卫士不安全文件访问权限漏洞

BUGTRAQ ID: 25186 熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 熊猫卫士以不安全访问权限安装系统文件，本地攻击者可能利用此漏洞提升自己的权限，获取系统的完全控制。 在安装熊猫卫士2008时默认将安装文件夹%ProgramFiles%\Panda Security\Panda Antivirus 2008\的权限设置成了Everyone:Full...