CVE-2008-1471 The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrar...
HighCVSS 7.2
EPSS 1.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| panda antivirus and firewall | = 2008 | No fix listed |
| panda internet security | = 2008 | No fix listed |
References
- 29311 third-party-advisory vendor-advisory
- www.pandasecurity.com patch
- www.pandasecurity.com patch
- 20080308 [TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability mailing-list
- 28150 patch vdb-entry
- 1019568 vdb-entry
- www.trapkit.de exploit patch
- ADV-2008-0801 vdb-entry
- panda-antivirus-cpointsys-priv-escalation(41079) vdb-entry