CVE:CVE-2014-5307
CNNVD:CNNVD-201408-348
Panda Security Panda Antivirus Pro、Panda Global Protection和Panda Internet Security都是西班牙熊猫安全（Panda Security）公司的防病毒产品。该产品可保护所有设备避免受到病毒、间谍软件、黑客等互联网威胁。
Panda Security 2014产品hft131306s24_r1之前版本的PavTPK.sys内核模式驱动中存在基于堆的缓冲区溢出漏洞。本地攻击者可通过向‘0x222008 IOCTL’函数调用传递特制的参数利用该漏洞获取权限。以下产品和版本受到影响：Panda Security Panda Antivirus Pro 2014、Panda Security Panda Global Protection 2014、Panda Security Panda Internet Security 2014。
solution:Upgrade pandasecurity panda_av_pro_2014 to a higher version than 13.01.01,and avoid the version 13.01.01; Upgrade pandasecurity panda_global_protection_2014 to a higher version than 7.01.01,and avoid the version 7.01.01; Upgrade pandasecurity panda_internet_security_2014 to a higher version than 19.01.01,and avoid the version 19.01.01