Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability

The host is installed with Kaspersky Anti-Virus 2010 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyav2010dosvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability Authors: Veerendra GG Copyright: Copyrig...

Gentoo Security Advisory GLSA 200911-04 (dstat)

The remote host is missing updates announced in advisory GLSA 200911-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2009-4114

Kaspersky Anti-Virus 2010 uses a vulnerable kl1.sys driver where IOCTL 0x0022c008 accepts crafted kernel addresses. The issue causes memory corruption that can crash the system via local access. Affected version range includes 9.0.0.463 and may include earlier builds up to 9.0.0.736; root cause d...

Oracle Database SUBSCRIPTION_NAME Parameter SQL Injection (CVE-2005-1197)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...

Kaspersky Anti-Virus kl1.sys驱动本地拒绝服务漏洞

BUGTRAQ ID: 37044 Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky杀毒软件所使用的kl1.sys驱动没有检查IOCTL的输入地址，如果用户修改了一个或两个DWORD就可以触发异常，导致系统蓝屏死机。 Kaspersky Labs Kaspersky Antivirus 2010 9.0.0.463 厂商补丁： Kaspersky Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kaspersky.com/ include...

Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption

No description provided by source. / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendor: Notified No L.P.E. for kiddie...

Oracle Database Server DBMS_METADATA Package SQL Injection (CVE-2005-1197)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...

Avast! 4.8.1351.0 AntiVirus - aswMon2.sys Kernel Memory Corruption

Avast! 4.8.1351.0 AntiVirus - aswMon2.sys Kernel Memory Corruption / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendo...

FreeBSD fifo_vnops.c资源泄漏本地拒绝服务漏洞

BUGTRAQ ID: 36949 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的usr/src/sys/fs/fifofs/fifovnops.c文件中存在资源泄漏漏洞： / Open called to set up a new instance of a fifo or to find an active instance of a fifo. / / ARGSUSED / static int fifoopenap struct vopopenargs / struct vnode avp; int amode; struc...

Avast! Antivirus aavmKer4.sys驱动本地权限提升漏洞

BUGTRAQ ID: 36888 CVECAN ID: CVE-2009-3523 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus的AavmKer4.sys内核驱动没有正确地处理IOCTL（0xB2D6000C和0xB2D60034）请求，驱动将不可信任的用户态代码传送给了内核地址用作参数，本地用户通过特制的IOCTL调用就可以执行任意内核态指令。 ALWIL Software Avast! Antivirus 4.8 厂商补丁： ALWIL Software --------------...

kernel: SELinux and mmap_min_addr

The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to 1 the default configuration of the allowunconfinedmmapl...

Oracle Database Server SQL Injection In Package SYS.KUPV (CVE-2006-0586)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities

The remote Windows host is running avast! Professional Edition. The installed version of avast! Professional Edition is potentially affected by multiple issues : - A local privilege escalation vulnerability because the 'avast4.ini' file is created with insecure permissions on setup. CVE-2009-3524...

CVE-2009-3523

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Kaspersky AV 2010 9.0.0.463 Local DoS

No description provided by source. include stdio.h include windows.h include winioctl.h include stdlib.h include string.h / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs...

Kaspersky AV 2010 9.0.0.463 - Local Denial of Service

Kaspersky AV 2010 9.0.0.463 - Local Denial of Service include include include include include / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs Contact :...

Kaspersky AV 2010 9.0.0.463 - Local Denial of Service

include include include include include / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs Contact : [email protected] //----- Application description The most trusted...

Kaspersky AV 2010 9.0.0.463 Local DoS

Exploit for unknown platform in category dos / poc ===================================== Kaspersky AV 2010 9.0.0.463 Local DoS ===================================== Title: Kaspersky AV 2010 9.0.0.463 Local DoS CVE-ID: OSVDB-ID: Author: Heurs Published: 2009-09-29 Verified: yes view source print?...

Avast! Antivirus aswMon2.sys驱动本地权限提升漏洞

BUGTRAQ ID: 36507 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast!的aswMon2.sys驱动没有正确地过滤用户所提供的IOCTL输入，本地用户可以通过提交恶意的IOCTL请求触发内核内存破坏，导致系统蓝屏死机或执行任意内核态代码。 ALWIL Software Avast! Antivirus 4.8.1351.0 厂商补丁： ALWIL Software -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.avast.com/index.ht...