CVE-2015-1438

HIGH 7.8CVE-2015-1438 · Published 25/07/2017 · updated 17/06/2026

In short

CVE-2015-1438 is a HIGH (CVSS 7.8) vulnerability affecting panda antivirus pro 2015 (panda security), panda global protection 2015 (panda security), panda gold protection 2015 (panda security).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
panda antivirus pro 2015 panda_security	`= 1.0.0.13`	No fix yet
panda global protection 2015 panda_security	`= 1.0.0.13`	No fix yet
panda gold protection 2015 panda_security	`= 1.0.0.13`	No fix yet
panda internet security 2015 panda_security	`= 1.0.0.13`	No fix yet

Description

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.

References

packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.html · Third Party Advisory
seclists.org/fulldisclosure/2015/Jul/42 · Mailing List
seclists.org/fulldisclosure/2015/Jul/61 · Mailing List
securityfocus.com/bid/75715 · Third Party Advisory
portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-1438 · Exploit
tools.cisco.com/security/center/viewAlert.x · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free