The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows-nt | Microsoft | vista (including) | vista (including) |
| Windows-nt | Microsoft | xp (including) | xp (including) |
| Windows_2000 | Microsoft | * | * |
| Windows_vista | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |