ZDI-21-1336: Panda Security Free Antivirus Unnecessary Privileges Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the use of named pipes. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Panda Security |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-21-1336?
ZDI-21-1336 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix ZDI-21-1336?
To fix ZDI-21-1336, update your Panda Security Free Antivirus to the latest version provided by the vendor.
Who is affected by ZDI-21-1336?
ZDI-21-1336 affects installations of Panda Security Free Antivirus on local systems.
Can ZDI-21-1336 be exploited remotely?
No, ZDI-21-1336 requires local access to the system for exploitation.
What are the potential impacts of ZDI-21-1336?
The potential impacts of ZDI-21-1336 include unauthorized access and manipulation of sensitive data by an attacker.
- agent/references
- agent/type
- agent/severity
- agent/title
- agent/description
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-1336
- alias/ZDI-CAN-14208
- alias/CVE-2021-34998
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/panda security
- canonical/panda security