Full Disclosure

Panda Security 2016 Home User Products – Privilege Escalation

Posted by Kyriakos Economou on Apr 06

* CVE: CVE-2015-7378
* Vendor: Panda Security
* Reported by: Kyriakos Economou
* Date of Release: 05/04/2016
* Affected Products: Multiple
* Affected Version: Panda Security URL Filtering < v4.3.1.9
* Fixed Version: Panda Security URL Filtering v4.3.1.9

Description:
All Panda Security 2016 Home User products for Windows are vulnerable to privilege escalation, which allows a local
attacker to execute code as SYSTEM from any account (Guest…