CVE-2019-12042

The CVE-2019-12042 issue affects Panda Security products (Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, Panda Internet Security). Root cause: insecure permissions on the shared memory section object Global\PandaDevicesAgentSharedMemory and the e...

CVE-2009-4215

CVE-2009-4215 affects Panda Global Protection 2010, Panda Internet Security 2010, and Panda Antivirus Pro 2010. The vulnerability stems from weak permissions (Everyone: Full Control) on product files, which could allow local users to replace executables with Trojan horses and gain privileges. Con...

CVE-2017-17684

Panda Global Protection 17.0.1 is affected by CVE-2017-17684, a denial-of-service due to a crafted 0xb3702c04 \.PSMEMDriver DeviceIoControl request that can crash the system. Public sources consistently describe a DoS impact (system crash) rather than remote code execution. Affected product line ...

CVE-2018-6322

Affected product : Panda Global Protection 17.0.1. Vulnerability : Local privilege escalation via impersonation of the insecurely created named pipe \dot-\pipe\PSANMSrvcPpal, granting full access to the Everyone group and enabling privilege gain or DoS. Root cause : Insecurely created named pipe ...

CVE-2017-17683

CVE-2017-17683 affects Panda Global Protection 17.0.1 and allows a denial-of-service (system crash) via a 0xb3702c44 \.PSMEMDriver DeviceIoControl request. The vulnerability is associated with an affected PSMEMDriver path and can be triggered remotely (network attack vector) with no user interact...

CVE-2018-6321

CVE-2018-6321 : Connected sources confirm a local privilege escalation in Panda Global Protection 17.0.1, via an unquoted Windows search path in the panda_url_filtering service. The vulnerability is triggered by placing a malicious artefact, allowing a local user to gain higher privileges. Root c...