CVE-2009-4215

HIGH 7.2CVE-2009-4215 · Published 07/12/2009 · updated 16/06/2026

In short

CVE-2009-4215 is a HIGH (CVSS 7.2) vulnerability affecting panda antivirus (pandasecurity), panda global protection (pandasecurity), panda internet security (pandasecurity).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 30.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
panda antivirus pandasecurity	`= 2010`	No fix yet
panda global protection pandasecurity	`= 2010`	No fix yet
panda internet security pandasecurity	`= 2010`	No fix yet

Description

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.

References

secunia.com/advisories/37373 · Vendor Advisory
pandasecurity.com/homeusers/support/card · Patch
securityfocus.com/archive/1/507811/100/0/threaded
securitytracker.com/id
vupen.com/english/advisories/2009/3126 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/54268

More vulnerabilities in panda antivirus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2009-4215 is a HIGH (CVSS 7.2) vulnerability affecting panda antivirus (pandasecurity), panda global protection (pandasecurity), panda internet security (pandasecurity).

Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 30.7% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

panda antivirus

pandasecurity

= 2010

No fix yet

panda global protection

pandasecurity

= 2010

No fix yet

panda internet security

pandasecurity

= 2010

No fix yet

More vulnerabilities in panda antivirus

See all →