Micropoint Mp110003.sys <= 1.3.10123.0 Local Privilege Escalation Vulnerability

微点主动防御驱动mp110013.sys的允许用户态程序发送PspCreateProcessNotifyRoutineCount和PspCreateProcessNotifyRoutine相对于ntoskrnl的偏移给驱动，驱动定期在系统线程或在调用NtCreateProcessEx时,检查PspCreateProcessNotifyRoutineCount中的值是否小于初始化时从PspCreateProcessNotifyRoutine中计算的值，如果小于，就写回原始的值，从而造成了内核任意地址写入漏洞 mp.100323.1.2.10581.0278.r1 mp110013.sys...

微点主动防御 mp110013.sys <= 1.3.10123.0 本地拒绝服务漏洞

微点主动防御软件是第三代反病毒软件，颠覆了传统杀毒软件采用病毒特征码识别病毒的反病毒理念。微点主动防御软件采用主动防御技术能够自主分析判断病毒，解决了杀毒软件无法防杀层出不穷的未知木马和新病毒的弊端。 不正确地处理NtSetSystemTime的参数，引发本地拒绝服务漏洞 mp.100323.1.2.10581.0278.r1 mp110013.sys 1.3.10123.0 timestamp:4BA1863F checksum 1e7b8 暂无 等待官方补丁 http://www.micropoint.com.cn/ int mainint argc, char argv...

Oracle Database Server SYS.DBMS_METADATA_UTIL Package SQL Injection (CVE-2006-0260)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Oracle Database Server DBMS_EXPORT_EXTENSION Package Privilege Escalation (CVE-2006-2081)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects are provided in order to better manage the data. The included stored procedures and functions, or subprograms,...

Avast Antivirus 'aavmker4.sys' Denial Of Service Vulnerability - Windows

Avast AntiVirus is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS09-050 Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

This module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates not RTM, and Windows 2008 Server prior to R2. Windows Vista without SP1 does not seem affected by this flaw. This...

A link to Re-Indexing is visible to users even if they are not sys admin

I saw this on EACJ where I am not a sys admin quote XXXX made configuration changes in section 'Custom Fields' at 01/Feb/10 1:16 PM. It is recommended that you perform a re-index. For more information, please click the Help icon. To perform the re-index now, please go to the 'Indexing' section...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

$Id: ms09050smb2negotiatefuncindex.rb 8656 2010-02-26 13:42:17Z sf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-0705

Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service system crash or execute arbitrary code to gain privileges via IOCTL requests using...

CVE-2010-0705

Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service system crash or execute arbitrary code to gain privileges via IOCTL requests using...

CVE-2010-0705

Summary: CVE-2010-0705 affects Avast! Antivirus on Windows, involving the kernel driver aavmker4.sys. The vulnerability arises from improper input validation in IOCTL 0xb2d60030, enabling memory corruption that can cause a denial of service or allow local privilege escalation. Affected products i...

[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

Avast! antiviral applications memory corruption

Memory corruption on IOCTL processing in aavmker4.sys...

avast! Professional Edition < 5.0.418 Local Privilege Escalation

The remote Windows host is running avast! Professional Edition. The installed version of this software is potentially affected by a local privilege escalation vulnerability because the 'aavmker4.sys' driver fails to sufficiently sanitize user-supplied input passed via a specially crafted IOCTL...

Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability

The host is installed with Kaspersky Anti-Virus 2010 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyav2010dosvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability Authors: Veerendra GG Copyright: Copyrig...

Gentoo Security Advisory GLSA 200911-04 (dstat)

The remote host is missing updates announced in advisory GLSA 200911-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2009-4114

Kaspersky Anti-Virus 2010 uses a vulnerable kl1.sys driver where IOCTL 0x0022c008 accepts crafted kernel addresses. The issue causes memory corruption that can crash the system via local access. Affected version range includes 9.0.0.463 and may include earlier builds up to 9.0.0.736; root cause d...

Oracle Database SUBSCRIPTION_NAME Parameter SQL Injection (CVE-2005-1197)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...

Kaspersky Anti-Virus kl1.sys驱动本地拒绝服务漏洞

BUGTRAQ ID: 37044 Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky杀毒软件所使用的kl1.sys驱动没有检查IOCTL的输入地址，如果用户修改了一个或两个DWORD就可以触发异常，导致系统蓝屏死机。 Kaspersky Labs Kaspersky Antivirus 2010 9.0.0.463 厂商补丁： Kaspersky Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kaspersky.com/ include...

Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption

No description provided by source. / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendor: Notified No L.P.E. for kiddie...