Description
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
References
- 1023121 vdb-entry
- 37373 third-party-advisory
- panda-directory-privilege-escalation(54268) vdb-entry
- http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
- ADV-2009-3126 vdb-entry
- 20091111 Panda Security Software Local Privilege Escalation mailing-list