CVE-2008-1471: Panda Antivirus And Firewall

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.

Affected products

• Panda Panda Antivirus And Firewall: version 2008 only
• Panda Panda Internet Security: version 2008 only

Published 2008-03-24. Last modified 2026-06-16.