CVE-2009-4215
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions...
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
Exploit likelihood
What each source reports
NVD Score used
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
CVE-2009-4215- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
CVE-2009-4215- Updated
- 2026-11-02
EUVDEUVD-2009-4184 No score
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
EUVD-2009-4184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pwcw-cc5w-f5wp No score
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions...
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
GHSA-pwcw-cc5w-f5wp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4215 is a high vulnerability (CVSS 7.2) in Pandasecurity Panda Global Protection, published December 7, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.
References
securitytracker.com/id?1023121
secunia.com/advisories/37373
exchange.xforce.ibmcloud.com/vulnerabilities/54268
pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
vupen.com/english/advisories/2009/3126
securityfocus.com/archive/1/507811/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2009-4215
github.com/advisories/GHSA-pwcw-cc5w-f5wp