Buffer overflow in Pandasecurity Panda_av_pro_2014
CVE-2014-5307
Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.
Vulnerability class: Buffer Overflow
EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.
Affected products
- Pandasecurity Panda_av_pro_2014 — versions 13.01.01
- Pandasecurity Panda_global_protection_2014 — versions 7.01.01
- Pandasecurity Panda_internet_security_2014 — versions 19.01.01
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)