Panda Multiple Products 'RKPavProc.sys' IOCTL Request Multiple Vulnerabilities

Bugtraq ID:	41428
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jul 07 2010 12:00AM
Updated:	Jul 07 2010 12:00AM
Credit:	NT Internals
Vulnerable:	Panda Internet Security 2010 Panda Global Protection 2010 Panda Antivirus Pro 2010 Panda Antivirus for Netbooks 0 Panda Anti-Rootkit 0
Not Vulnerable:

Panda Multiple Products 'RKPavProc.sys' IOCTL Request Multiple Vulnerabilities

Multiple Panda products are prone to multiple vulnerabilities.

A local attacker can exploit these issues to execute arbitrary code with elevated privileges, which may facilitate a compromise of the affected computer, or cause denial-of-service conditions.

The following products are affected:

Panda Global Protection 2010
Panda Internet Security 2010
Panda Antivirus Pro 2010
Panda Antivirus for Netbooks
Panda Anti-Rootkit

Panda Multiple Products 'RKPavProc.sys' IOCTL Request Multiple Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Panda Multiple Products 'RKPavProc.sys' IOCTL Request Multiple Vulnerabilities

Solution:
The vendor has released fixes for the issues. Please see the references for more information.

Panda Multiple Products 'RKPavProc.sys' IOCTL Request Multiple Vulnerabilities

References:

• Panda Software Homepage (Panda Software)
  
• Panda (RKPavProc.sys) Local Kernel Stack Corruption (NT Internals)
  
• Security vulnerability affecting parameter checks (Panda)