CVE-2009-4215

{"id": "CVE-2009-4215", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-12-07T17:30:00.313", "references": [{"url": "http://secunia.com/advisories/37373", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/507811/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1023121", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/3126", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54268", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/37373", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/507811/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1023121", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/3126", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54268", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs."}, {"lang": "es", "value": "Panda Global Protection 2010, Internet Security 2010, y Antivirus Pro 2010 usa permisos d\u00e9biles (Todos: Control Total ) para los archivos product, lo que permite a usuarios locales obtener privilegios por reemplazamiento de ejecutables con programas troyanos."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:32_bit:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CC3161FD-F631-405A-BE3A-0B78D5DCD7B2"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:64-bit:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C38B6FA8-58B3-4037-A4EE-B496F1657CAE"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:32-bit:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED232169-696C-4613-A803-28101AB43A49"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pandasecurity:panda_antivirus:2010:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B907640D-8144-4D89-88F2-B4AF1735BDDE"}, {"criteria": "cpe:2.3:a:pandasecurity:panda_global_protection:2010:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7B2D903-A66F-4679-9DBA-1354A5917462"}, {"criteria": "cpe:2.3:a:pandasecurity:panda_internet_security:2010:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1381C07F-3956-450A-8C87-58297DA942DA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}