CVE-2015-1438: Buffer Overflow
First published: Tue Jul 25 2017(Updated: )
Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Panda Antivirus Pro | =1.0.0.13 | |
| Panda Security Panda Gold Protection | =1.0.0.13 | |
| Panda Security | =1.0.0.13 | |
| Panda Internet Security 2015 | =1.0.0.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.html
- http://seclists.org/fulldisclosure/2015/Jul/42
- http://seclists.org/fulldisclosure/2015/Jul/61
- http://www.securityfocus.com/bid/75715
- https://tools.cisco.com/security/center/viewAlert.x?alertId=39908
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-1438/
Frequently Asked Questions
What is the severity of CVE-2015-1438?
CVE-2015-1438 is rated as high severity due to its potential for arbitrary code execution with kernel privileges.
How do I fix CVE-2015-1438?
To mitigate CVE-2015-1438, update Panda Security products to the latest version available that addresses this vulnerability.
Which versions of Panda Security are affected by CVE-2015-1438?
CVE-2015-1438 affects version 1.0.0.13 of Panda Antivirus Pro, Panda Global Protection, Panda Gold Protection, and Panda Internet Security 2015.
What type of vulnerability is CVE-2015-1438?
CVE-2015-1438 is a heap-based buffer overflow vulnerability.
Can CVE-2015-1438 allow for remote attacks?
Yes, CVE-2015-1438 can be exploited by attackers to execute arbitrary code remotely, depending on the attack vector.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/panda security
- canonical/panda antivirus pro
- version/panda antivirus pro/1.0.0.13
- canonical/panda security panda gold protection
- version/panda security panda gold protection/1.0.0.13
- canonical/panda security
- version/panda security/1.0.0.13
- canonical/panda internet security 2015
- version/panda internet security 2015/1.0.0.13