CVE-2007-4191

Summary

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/archive/1/480022/100/100/threaded
• http://secunia.com/advisories/26336
• http://www.securityfocus.com/archive/1/480443/100/100/threaded
• http://www.securitytracker.com/id?1018722
• http://www.securityfocus.com/bid/25186
• http://www.securityfocus.com/archive/1/475373/100/0/threaded
• https://tiifp.org/tarkus/advisories/panda030707.txt
• http://securityreason.com/securityalert/2968
• http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
• http://www.vupen.com/english/advisories/2007/2784

References

• http://www.securityfocus.com/archive/1/480022/100/100/threaded
• http://secunia.com/advisories/26336
• http://www.securityfocus.com/archive/1/480443/100/100/threaded
• http://www.securitytracker.com/id?1018722
• http://www.securityfocus.com/bid/25186
• http://www.securityfocus.com/archive/1/475373/100/0/threaded
• https://tiifp.org/tarkus/advisories/panda030707.txt
• http://securityreason.com/securityalert/2968
• http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
• http://www.vupen.com/english/advisories/2007/2784

• ←Previous
• Next→