CVEs-PoC/2014/CVE-2014-5307.md

CVE-2014-5307

Description

Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.

POC

Reference

• http://packetstormsecurity.com/files/127948/Panda-Security-2014-Privilege-Escalation.html
• http://packetstormsecurity.com/files/127948/Panda-Security-2014-Privilege-Escalation.html

Github

No PoCs found on GitHub currently.