5 matches found
CVE-2009-4215
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
CVE-2017-17684
Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request.
CVE-2018-6322
Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group.
CVE-2018-6321
Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.
CVE-2017-17683
Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request.