CVE-2009-4215
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions...
CVE-2009-4215 is a high vulnerability (CVSS 7.2) in Pandasecurity Panda Global Protection, published December 7, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.37%EPSS, 31st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
CVE-2009-4215- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
CVE-2009-4215- Updated
- 2026-11-02
EUVDEUVD-2009-4184No score
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
EUVD-2009-4184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pwcw-cc5w-f5wpNo score
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions...
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
- Record
GHSA-pwcw-cc5w-f5wp- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1023121
secunia.com/advisories/37373
exchange.xforce.ibmcloud.com/vulnerabilities/54268
pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2
vupen.com/english/advisories/2009/3126
securityfocus.com/archive/1/507811/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2009-4215
github.com/advisories/GHSA-pwcw-cc5w-f5wp