CVE-2007-4191 Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or...
MediumCVSS 6.9
EPSS 0.76%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| panda antivirus | = 2008 | No fix listed |
References
- 26336 third-party-advisory
- 2968 third-party-advisory
- www.pandasecurity.com
- 20070802 Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again) mailing-list
- 20070919 RE: Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again) mailing-list
- 20070924 RE: Re[2]: [Full-disclosure] Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again) mailing-list
- 25186 exploit vdb-entry
- 1018722 vdb-entry
- ADV-2007-2784 vdb-entry
- tiifp.org