CVE-2014-3450

CVE-2014-3450 affects Panda Security products for Windows: Panda Gold Protection 2014 (7.01.01), Panda Global Protection 2014 (7.01.01), Panda Internet Security 2014 (19.01.01), and Panda AV Pro 2014 (13.01.01). All are listed as vulnerable to a local privilege escalation (Privilege Escalation Vu...

CVE-2014-5307

CVE-2014-5307 describes a heap-based buffer overflow in the PavTPK.sys kernel-mode driver used by Panda Security 2014 products. An attacker local to the system could gain SYSTEM privileges by sending a crafted argument to IOCTL 0x222008. The vulnerability affects Panda Security 2014 products prio...