Panda Antivirus up to 18.07 Service Agent AgentSvc.exe JSON String access control

Summaryinfo

A vulnerability marked as critical has been reported in Panda Antivirus, Antivirus Pro, Dome, Global Protection, Gold Protection and Internet Security up to 18.07. The affected element is an unknown function of the file AgentSvc.exe of the component Service Agent. Performing a manipulation as part of JSON String results in access control. This vulnerability is known as CVE-2019-12042. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Panda Antivirus, Antivirus Pro, Dome, Global Protection, Gold Protection and Internet Security up to 18.07 (Anti-Malware Software). This affects an unknown code of the file AgentSvc.exe of the component Service Agent. The manipulation as part of a JSON String leads to a access control vulnerability. CWE is classifying the issue as CWE-264. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which leads to privilege escalation when the CmdLineExecute event is queued. This affects Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, and Panda Internet Security.

The weakness was published 05/23/2019 (Website). The advisory is shared at pandasecurity.com. This vulnerability is uniquely identified as CVE-2019-12042 since 05/13/2019. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

Upgrading to version 18.07.03 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Anti-Malware Software

Vendor

• Panda

Name

• Antivirus
• Antivirus Pro
• Dome
• Global Protection
• Gold Protection
• Internet Security

Version

• 18.07

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion