CVE-2008-1471 : The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 20

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.

Published 2008-03-24 22:44:00

Updated 2018-10-11 20:34:56

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2008-1471

Panda » Panda Antivirus And Firewall » Version: 2008
cpe:2.3:a:panda:panda_antivirus_and_firewall:2008:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows-nt » Version: Vista X32 Edition
When used together with: Microsoft » Windows-nt » Version: XP X32 Edition
When used together with: Microsoft » Windows 2000 » PRO Edition
When used together with: Microsoft » Windows Vista » X64 Edition
When used together with: Microsoft » Windows Xp » X64 Edition
Panda » Panda Internet Security » Version: 2008
cpe:2.3:a:panda:panda_internet_security:2008:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows-nt » Version: Vista X32 Edition
When used together with: Microsoft » Windows-nt » Version: XP X32 Edition
When used together with: Microsoft » Windows 2000 » PRO Edition
When used together with: Microsoft » Windows Vista » X64 Edition
When used together with: Microsoft » Windows Xp » X64 Edition

Exploit prediction scoring system (EPSS) score for CVE-2008-1471

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-1471

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-1471

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-1471

Jump to

Vulnerability Details : CVE-2008-1471

Products affected by CVE-2008-1471

Exploit prediction scoring system (EPSS) score for CVE-2008-1471

CVSS scores for CVE-2008-1471

CWE ids for CVE-2008-1471

References for CVE-2008-1471