Privilege Escalation through Binary Planting in Panda Internet Security
Software: Panda Internet Security 2012 & 2013 Vendor: http://www.pandasecurity.com/ Vulnerability Type: Binary Planting Attack Remote: No Local: Yes Discovered: 09 September 2012 Reported: 19 November 2012 Disclosed: 04 December 2012
As a result of an incorrect dynamic link library (DLL) loading in Panda Internet Security, an attacker with user level access to the machine can elevate his/her privileges to SYSTEM.
This can be accomplished by planting a malicious DLL file in a writable folder that is part of the system's %PATH% variable. The malicious DLL is loaded when the vulnerable Panda service or the system is restarted.
The following DLLs are insecurely loaded by Panda Internet Security 2013: