PT-2019-12630 · Panda · Panda Dome+5

Souhail Hammou

·

Published

2019-05-23

·

Updated

2020-08-24

·

CVE-2019-12042

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Panda Antivirus versions prior to 18.07.03 Panda Antivirus Pro versions prior to 18.07.03 Panda Dome versions prior to 18.07.03 Panda Global Protection versions prior to 18.07.03 Panda Gold Protection versions prior to 18.07.03 Panda Internet Security versions prior to 18.07.03
Description The issue is related to insecure permissions in Panda products, specifically with the section object GlobalPandaDevicesAgentSharedMemory and the event GlobalPandaDevicesAgentSharedMemoryChange. This allows attackers to queue an event to the system service AgentSvc.exe, leading to privilege escalation when the CmdLineExecute event is queued.
Recommendations For Panda Antivirus versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Antivirus Pro versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Dome versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Global Protection versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Gold Protection versions prior to 18.07.03, update to version 18.07.03 or later. For Panda Internet Security versions prior to 18.07.03, update to version 18.07.03 or later.

Exploit

Fix

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-12042

Affected Products

Panda Antivirus
Panda Antivirus Pro
Panda Dome
Panda Global Protection
Panda Gold Protection
Panda Internet Security