Vulnerability Details CVE-2009-4215
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.0%
CVSS Severity
CVSS v2 Score 7.2
References
- http://secunia.com/advisories/37373
- http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
- http://www.securityfocus.com/archive/1/507811/100/0/threaded
- http://www.securitytracker.com/id?1023121
- http://www.vupen.com/english/advisories/2009/3126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54268
- http://secunia.com/advisories/37373
- http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
- http://www.securityfocus.com/archive/1/507811/100/0/threaded
- http://www.securitytracker.com/id?1023121
- http://www.vupen.com/english/advisories/2009/3126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54268
Products affected by CVE-2009-4215
-
cpe:2.3:a:pandasecurity:panda_antivirus:2010
-
cpe:2.3:a:pandasecurity:panda_global_protection:2010
-
cpe:2.3:a:pandasecurity:panda_internet_security:2010
-
cpe:2.3:o:microsoft:windows_7:-
-
cpe:2.3:o:microsoft:windows_7:sp1
-
cpe:2.3:o:microsoft:windows_vista:*
-
cpe:2.3:o:microsoft:windows_xp:*