Description
Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.
References
- 20140820 CVE-2014-5307 - Privilege Escalation in Panda Security Products mailing-list
- http://packetstormsecurity.com/files/127948/Panda-Security-2014-Privilege-Escalation.html
- 20140820 CVE-2014-5307 - Privilege Escalation in Panda Security Products mailing-list
- 69293 vdb-entry
- panda-security-cve20145307-bo(95382) vdb-entry
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5307/