CVE-2007-4191
Last modified
CVE-2007-4191 is a vulnerability of currently unknown severity. Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.. EPSS estimates a 0.76% chance of exploitation in the next 30 days.
Description
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Panda | Panda Antivirus | 2008 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4191?
How severe is CVE-2007-4191?
How do I fix CVE-2007-4191?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4185Joomla! 1.0.12 allows remote attackers to obtain sensitive i…
- CVE-2007-4186PHP remote file inclusion vulnerability in admin.tour_toto.p…
- CVE-2007-4187Multiple eval injection vulnerabilities in the com_search co…
- CVE-2007-4188Session fixation vulnerability in Joomla! before 1.0.13 (aka…
- CVE-2007-4189Multiple cross-site scripting (XSS) vulnerabilities in Jooml…
- CVE-2007-4190CRLF injection vulnerability in Joomla! before 1.0.13 (aka S…
- CVE-2007-4192Multiple cross-site scripting (XSS) vulnerabilities in IDE G…
- CVE-2007-4193Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2007-4194Guidance Software EnCase 5.0 allows user-assisted remote att…
- CVE-2007-4195Use-after-free vulnerability in ext2fs.c in Brian Carrier Th…
- CVE-2007-4196icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misin…
- CVE-2007-4197icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits…
Are you affected by CVE-2007-4191?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
