CVE-2007-4191 EXPLOIT
6.9
MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 54)
Patch early
A public exploit exists.
Description
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.
Scoring
| CVSS | 6.9 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 0.76% — more likely to be exploited than 54% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-08-08 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| panda | panda antivirus |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Panda AntiVirus 2008 - Local Privilege Escalation | 2007-08-05 |
References
- http://secunia.com/advisories/26336
- http://securityreason.com/securityalert/2968
- http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
- http://www.securityfocus.com/archive/1/475373/100/0/threaded
- http://www.securityfocus.com/archive/1/480022/100/100/threaded
- http://www.securityfocus.com/archive/1/480443/100/100/threaded
- http://www.securityfocus.com/bid/25186
- http://www.securitytracker.com/id?1018722
- http://www.vupen.com/english/advisories/2007/2784
- https://tiifp.org/tarkus/advisories/panda030707.txt
- http://secunia.com/advisories/26336
- http://securityreason.com/securityalert/2968
- http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
- http://www.securityfocus.com/archive/1/475373/100/0/threaded
- http://www.securityfocus.com/archive/1/480022/100/100/threaded
- http://www.securityfocus.com/archive/1/480443/100/100/threaded
- http://www.securityfocus.com/bid/25186
- http://www.securitytracker.com/id?1018722
- http://www.vupen.com/english/advisories/2007/2784
- https://tiifp.org/tarkus/advisories/panda030707.txt
→ the Explorer · watch your stack · NVD