high7.2
CVE-2009-4215
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows …
Impact
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pandasecurity | Panda Antivirus | Version 2010 |
| Pandasecurity | Panda Global Protection | Version 2010 |
| Pandasecurity | Panda Internet Security | Version 2010 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/37373
- http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
- http://www.securityfocus.com/archive/1/507811/100/0/threaded
- http://www.securitytracker.com/id?1023121
- http://www.vupen.com/english/advisories/2009/3126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54268
- http://secunia.com/advisories/37373
- http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
- http://www.securityfocus.com/archive/1/507811/100/0/threaded
- http://www.securitytracker.com/id?1023121
- http://www.vupen.com/english/advisories/2009/3126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54268