PT-2007-5386 · Panda · Panda Antivirus 2008

Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4191

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Panda Antivirus 2008

Description The issue allows local users to obtain LocalSystem privileges by modifying certain files, including PAVSRV51.EXE, due to weak permissions on service executables stored under the product's installation directory.

Recommendations For Panda Antivirus 2008, consider restricting access to the PAVSRV51.EXE file and other sensitive executables under the installation directory to prevent unauthorized modifications until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2007-4191

Affected Products

Panda Antivirus 2008

References · 12

• 🔥 https://exploit-db.com/exploits/4257 · Exploit
• 🔥 http://securityfocus.com/bid/25186 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4191 · Security Note
• http://pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev · Note
• http://securitytracker.com/id?1018722 · Note
• http://securityreason.com/securityalert/2968 · Note
• http://securityfocus.com/archive/1/480443/100/100/threaded · Note
• http://secunia.com/advisories/26336 · Note
• https://tiifp.org/tarkus/advisories/panda030707.txt · Note
• http://vupen.com/english/advisories/2007/2784 · Note
• http://securityfocus.com/archive/1/475373/100/0/threaded · Note
• http://securityfocus.com/archive/1/480022/100/100/threaded · Note