CVE-2007-4191

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Panda AntiVirus 2008 - Local Privilege Escalation2007-08-05 · local · windows · Verified

Impact

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/26336
• http://securityreason.com/securityalert/2968
• http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
• http://www.securityfocus.com/archive/1/475373/100/0/threaded
• http://www.securityfocus.com/archive/1/480022/100/100/threaded
• http://www.securityfocus.com/archive/1/480443/100/100/threaded
• http://www.securityfocus.com/bid/25186
• http://www.securitytracker.com/id?1018722
• http://www.vupen.com/english/advisories/2007/2784
• https://tiifp.org/tarkus/advisories/panda030707.txt
• http://secunia.com/advisories/26336
• http://securityreason.com/securityalert/2968
• http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
• http://www.securityfocus.com/archive/1/475373/100/0/threaded
• http://www.securityfocus.com/archive/1/480022/100/100/threaded
• http://www.securityfocus.com/archive/1/480443/100/100/threaded
• http://www.securityfocus.com/bid/25186
• http://www.securitytracker.com/id?1018722
• http://www.vupen.com/english/advisories/2007/2784
• https://tiifp.org/tarkus/advisories/panda030707.txt