Detections
Analytics
Panda Products RKPavProc.sys IOCTL Handling Vulnerabilities
high Nessus Plugin ID 47697
Language:
Synopsis
The remote host contains an antivirus application that is affected by multiple vulnerabilities.Description
The installed Panda security product is reportedly affected by multiple vulnerabilities in the 'RKPavProc.sys' kernel driver that can be triggered by specially crafted IOCTLs, leading to a NULL pointer dereference or a stack-based buffer overflow. An attacker could leverage these flaws to cause a denial of service or execute arbitrary code on the remote host with elevated privileges.Solution
Apply the appropriate hotfix as discussed in the vendor advisory above.See Also
http://www.ntinternals.org/ntiadv0905/ntiadv0905.html
https://www.pandasecurity.com/usa/support/card?id=80184&idIdioma=2
Plugin Details
Severity: High
ID: 47697
File Name: panda_ioctl_request_multiple_vulns.nasl
Version: 1.10
Type: local
Agent: windows
Family: Windows
Published: 7/9/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:pandasecurity:panda_antivirus
Required KB Items: Antivirus/Panda/installed
Exploit Ease: No known exploits are available
Patch Publication Date: 7/1/2010
Vulnerability Publication Date: 7/6/2010
Reference Information
BID: 41428