VulnerabilityModified

CVE-2015-1438

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.

HIGH 7.8EPSS 0.74%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.74%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.0: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.74% probability · 53th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: panda security/panda antivirus pro 2015 · panda security/panda global protection 2015 · panda security/panda gold protection 2015 · panda security/panda internet security 2015
Source: cve@mitre.org

References

http://packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Jul/42Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2015/Jul/61Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/75715Third Party Advisory, VDB Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-1438/Exploit, Third Party Advisory
https://tools.cisco.com/security/center/viewAlert.x?alertId=39908Third Party Advisory
http://packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Jul/42Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2015/Jul/61Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/75715Third Party Advisory, VDB Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-1438/Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.