NVD Vulnerability Detail

CVE-2015-1438

Summary	Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.
Publication Date	July 26, 2017, 3:29 a.m.
Registration Date	Jan. 26, 2021, 2:46 p.m.
Last Update	Nov. 21, 2024, 11:25 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:panda_security:panda_internet_security_2015:1.0.0.13:::::::*
cpe:2.3:a:panda_security:panda_gold_protection_2015:1.0.0.13:::::::*
cpe:2.3:a:panda_security:panda_antivirus_pro_2015:1.0.0.13:::::::*
cpe:2.3:a:panda_security:panda_global_protection_2015:1.0.0.13:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	https://tools.cisco.com/security/center/viewAlert.x?alertId=39908	MISC	Third Party Advisory
2	http://packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.html		Third Party Advisory VDB Entry
3	http://packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.html		Third Party Advisory VDB Entry
4	http://seclists.org/fulldisclosure/2015/Jul/42		Mailing List Third Party Advisory
5	http://seclists.org/fulldisclosure/2015/Jul/42		Mailing List Third Party Advisory
6	http://seclists.org/fulldisclosure/2015/Jul/61		Mailing List Third Party Advisory
7	http://seclists.org/fulldisclosure/2015/Jul/61		Mailing List Third Party Advisory
8	http://www.securityfocus.com/bid/75715		Third Party Advisory VDB Entry
9	http://www.securityfocus.com/bid/75715		Third Party Advisory VDB Entry
10	https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-1438/		Exploit Third Party Advisory
11	https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-1438/		Exploit Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

複数の Panda Security 製品におけるバッファエラーの脆弱性

Title	複数の Panda Security 製品におけるバッファエラーの脆弱性
Summary	複数の Panda Security 製品には、バッファエラーの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	July 10, 2015, midnight
Registration Date	Aug. 28, 2017, 11:59 a.m.
Last Update	Aug. 28, 2017, 11:59 a.m.

Affected System

Panda Security

Panda Antivirus Pro 2015 1.0.0.13

Panda Global Protection 2015 1.0.0.13

Panda Gold Protection 2015 1.0.0.13

Panda Internet Security 2015 1.0.0.13

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-1438	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1438
National Vulnerability Database (NVD)
2	CVE-2015-1438	https://nvd.nist.gov/vuln/detail/CVE-2015-1438
関連文書
3	CVE-2015-1438 - Arbitrary Code Execution [PSKMAD.sys] In Panda Security - Multiple Products	http://seclists.org/fulldisclosure/2015/Jul/61
4	CVE-2015-1438 - Panda Security Multiple Products Arbitrary Code Execution	http://seclists.org/fulldisclosure/2015/Jul/42

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Panda Security
1	Top Page	http://www.pandasecurity.com/

Change Log

No	Changed Details	Date of change
0	[2017年08月28日] 掲載	Feb. 17, 2018, 10:37 a.m.