PT-2019-12630 · Panda · Panda Dome+5

Souhail Hammou

·

Publicado

2019-05-23

·

Atualizado

2020-08-24

·

CVE-2019-12042

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Panda Antivirus versions prior to 18.07.03 Panda Antivirus Pro versions prior to 18.07.03 Panda Dome versions prior to 18.07.03 Panda Global Protection versions prior to 18.07.03 Panda Gold Protection versions prior to 18.07.03 Panda Internet Security versions prior to 18.07.03
Description The issue is related to insecure permissions in Panda products, specifically with the section object GlobalPandaDevicesAgentSharedMemory and the event GlobalPandaDevicesAgentSharedMemoryChange. This allows attackers to queue an event to the system service AgentSvc.exe, leading to privilege escalation when the CmdLineExecute event is queued.
Recommendations For Panda Antivirus versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Antivirus Pro versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Dome versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Global Protection versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Gold Protection versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Internet Security versions prior to 18.07.03, update to version 18.07.03 or later.

Exploit

Correção

Incorrect Permission

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2019-12042

Produtos afetados

Panda Antivirus
Panda Antivirus Pro
Panda Dome
Panda Global Protection
Panda Gold Protection
Panda Internet Security