PT-2009-6377 · Panda · Panda Global Protection 2010+2

Published 2009-12-07 · Updated 2018-10-10 · CVE-2009-4215

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Panda Global Protection 2010 Panda Internet Security 2010 Panda Antivirus Pro 2010

Description The issue allows local users to gain privileges by replacing executables with Trojan horse programs due to weak permissions (Everyone: Full Control) for the product files.

Recommendations For Panda Global Protection 2010, consider restricting access to the product files to prevent unauthorized modifications until a fix is available. For Panda Internet Security 2010, restrict write access to the product directory to minimize the risk of exploitation. For Panda Antivirus Pro 2010, limit permissions on executable files to prevent replacement with malicious programs.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-4215

Affected Products

Panda Antivirus Pro 2010

Panda Global Protection 2010

Panda Internet Security 2010

References · 7

• http://secunia.com/advisories/37373 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3126 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4215 · Security Note
• http://pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54268 · Note
• http://securityfocus.com/archive/1/507811/100/0/threaded · Note
• http://securitytracker.com/id?1023121 · Note