CVE-2014-5307 Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL....
HighCVSS 7.2
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pandasecurity panda av pro 2014 | = 13.01.01 | No fix listed |
| pandasecurity panda global protection 2014 | = 7.01.01 | No fix listed |
| pandasecurity panda internet security 2014 | = 19.01.01 | No fix listed |