VULNERABILITY INTELLIGENCE
CVE-2014-5307
CVSS score7.2 HIGH
EPSS probability0.57%
CISA KEVNot currently listed
Published2014-08-26
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer