Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption

Author: Tobias Klein
type: dos
platform: windows
port: 0
date_added: 2008-03-08
date_updated: 2014-02-05
verified: 1
codes: CVE-2008-1471;OSVDB-42717
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/28150/info

Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate IOCTL requests.

Local users may exploit this vulnerability to cause a denial of service or to execute arbitrary code in the context of the kernel.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31363.rar