Vulnerability of local privilege escalation in the AgentSvc process with Consumer products (CVE-2019-12042)

Information applies to:

Situation
A vulnerability has been detected by which it is possible to execute code with elevated privileges in Consumer products in versions earlier than 18.08.00. The AgentSvc process allowed executions not signed by Panda Security and with SYSTEM privileges.

Solution
This problem has been fixed in version 18.07.03, so any later version will not be affected.

Acknowledgements
Panda Security would like to thank the researcher Souhail Hammou for his dedication and effort in improving the safety of our products.