CVE-2008-1471
- State
- Published
- Severity
- Not scored
- Published
- Mar 24, 2008
- Updated
- Aug 7, 2024
- Reserved
- Mar 24, 2008
Description
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 29311third-party-advisory
- http://www.pandasecurity.com/homeusers/support/card?id=41337&idIdioma=2&ref=ProdExp
- ADV-2008-0801vdb-entry
- 28150vdb-entry
- http://www.trapkit.de/advisories/TKADV2008-001.txt
- 1019568vdb-entry
- 20080308 [TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerabilitymailing-list
- http://www.pandasecurity.com/homeusers/support/card?id=41231&idIdioma=2&ref=ProdExp
- panda-antivirus-cpointsys-priv-escalation(41079)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.