CVE-2009-4215

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.

Published: Dec 7, 2009
Updated: Apr 13, 2023
CVE: CVE-2009-4215
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
pandasecurity / panda_antivirus	2010	2010.x
pandasecurity / panda_global_protection	2010	2010.x
pandasecurity / panda_internet_security	2010	2010.x

http://secunia.com/advisories/37373
http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
http://www.securityfocus.com/archive/1/507811/100/0/threaded
http://www.securitytracker.com/id?1023121
http://www.vupen.com/english/advisories/2009/3126
https://exchange.xforce.ibmcloud.com/vulnerabilities/54268

Vulnerability Database

289,784

CVE-2009-4215