A security issue has been reported in multiple Panda products, which can be exploited by malicious, local users to gain escalated privileges.

The security issue is caused due to the applications setting insecure default permissions on the installation directory. This can be exploited to gain escalated privileges by replacing application binaries.

This is related to:
SA37373

The security issue is reported in the following products and versions:
* Panda Global Protection 2010 version 3.01.00
* Panda Internet Security 2010 version 15.01.00
* Panda Antivirus Pro 2010 version 09.01.00
* Panda Antivirus for Netbooks 2010 version 09.01.00

Other versions may also be affected.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Nikolas Sotiriu, Jeffrey Walton, and Maxim A. Kulakov.

Changelog
Further details available in Customer Area

Original Advisory
Panda:
http://www.pandasecurity.com/homeusers/support/card?id=80173

Nikolas Sotiriu:
http://sotiriu.de/adv/NSOADV-2010-001.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area