Panda Antivirus Pro CVE-2019-12042 Permission Bypass Vulnerability

Description

Insecure permissions of the section object Global\\PandaDevicesAgentSharedMemory and the event Global\\PandaDevicesAgentSharedMemoryChange in Panda Antivirus Pro before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which leads to privilege escalation when the CmdLineExecute event is queued.

Affected Applications

Panda Antivirus Pro

CVE References

Other References