Unscored severity · published Aug 8, 2007
CVE-2007-4191
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Panda Antivirus · Panda
2008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4191
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4191
secunia.com
http://secunia.com/advisories/26336
securityreason.com
http://securityreason.com/securityalert/2968
www.pandasecurity.com
http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
www.securityfocus.com
http://www.securityfocus.com/archive/1/475373/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/480022/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/480443/100/100/threaded
More from Panda Antivirus
–
CVE-2007-3969
Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2007-1670
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous…
–
CVE-2005-3922
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive
–
CVE-2000-0541
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command