CVE-2009-4215: Pandasecurity Panda Antivirus

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.

Affected products

• Pandasecurity Panda Antivirus: version 2010 only
• Pandasecurity Panda Global Protection: version 2010 only
• Pandasecurity Panda Internet Security: version 2010 only

Published 2009-12-07. Last modified 2026-06-16.