Panda Products RKPavProc.sys IOCTL Handling Vulnerabilities
High Nessus Plugin ID 47697
SynopsisThe remote host contains an antivirus application that is affected by multiple vulnerabilities.
DescriptionThe installed Panda security product is reportedly affected by multiple vulnerabilities in the 'RKPavProc.sys' kernel driver that can be triggered by specially crafted IOCTLs, leading to a NULL pointer dereference or a stack-based buffer overflow. An attacker could leverage these flaws to cause a denial of service or execute arbitrary code on the remote host with elevated privileges.
SolutionApply the appropriate hotfix as discussed in the vendor advisory above.