Panda Security Products Av_pro Heap Based Buffer Overflow Sept14 Network Vulnerability

Summary

This host is installed with Panda Antivirus and is prone to heap based buffer overflow vulnerability.

Impact

Successful exploitation will allow attackers to cause a heap-based buffer overflow by sending a specially crafted IOCTL request and execute arbitrary code on the system with kernel-level privileges. Impact Level: System/Application

Solution

Apply the hotfix 'hft131306s24_r1'. For more details refer link, http://www.pandasecurity.com NOTE: Please ignore the warning if the update is already applied.

Insight

Flaw exist due to improper bounds checking by the PavTPK.sys kernel mode driver.

Affected

Panda Antivirus Pro 2014 13.01.01

Detection

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

References