PT-2009-6377 · Panda · Panda Global Protection 2010+2

Publicado 2009-12-07 · Atualizado 2018-10-10 · CVE-2009-4215

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Panda Global Protection 2010 Panda Internet Security 2010 Panda Antivirus Pro 2010

Description The issue allows local users to gain privileges by replacing executables with Trojan horse programs due to weak permissions (Everyone: Full Control) for the product files.

Recommendations For Panda Global Protection 2010, consider restricting access to the product files to prevent unauthorized modifications until a fix is available. For Panda Internet Security 2010, restrict write access to the product directory to minimize the risk of exploitation. For Panda Antivirus Pro 2010, limit permissions on executable files to prevent replacement with malicious programs.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-4215

Produtos afetados

Panda Antivirus Pro 2010

Panda Global Protection 2010

Panda Internet Security 2010

Referências · 7

• http://secunia.com/advisories/37373 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3126 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4215 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54268 · Nota
• http://securityfocus.com/archive/1/507811/100/0/threaded · Nota
• http://securitytracker.com/id?1023121 · Nota
• http://pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2 · Aviso do Fabricante