CVE-2008-1471

The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.

Date published : 2008-03-24

http://www.securityfocus.com/bid/28150

http://www.securityfocus.com/archive/1/489292/100/0/threaded