360杀毒和360安全卫士内核驱动多个本地拒绝服务漏洞

BUGTRAQ ID: 39936 360杀毒和360安全卫士都是在中国广泛使用的免费杀毒软件。 360杀毒和360安全卫士所使用的profos.sys和360FkAdv.sys驱动没有正确地验证从用户空间所传送的进程对象指针，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 奇虎360 360安全卫士 6.1.5.1010 奇虎360 360杀毒 1.1.0.1096 厂商补丁： 奇虎360 ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.360.cn/...

360保险箱SafeBoxKrnl.sys驱动本地权限提升和拒绝服务漏洞

BUGTRAQ ID: 39940 360保险箱是国内第一款完全免费的防盗号软件。 360保险箱所使用的SafeBoxKrnl.sys驱动在处理IOCTL时错误的向IoFreeMdl函数传送了用户空间指针，本地用户可以通过提交恶意IOCTL请求触发内核内存破坏，导致执行任意内核态代码；此外SafeBoxKrnl.sys驱动中的错误还允许本地用户终止指定的进程。 奇虎360 360保险箱 3.0.0.1010 厂商补丁： 奇虎360 ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.360.cn/...

3 6 0 security guards bregdrv. sys and bregdll. dll file local privilege escalation exploit.-vulnerability warning-the black bar safety net

3 6 0 Security Defender is in China, the widely used free Internet security software. 3 6 0 security guards in the installation process on the user's system to install a registry operation program, the program can be used to bypass theoperating systemthe security check mechanism of any operation...

360安全卫士bregdrv.sys和bregdll.dll文件本地权限提升漏洞

360安全卫士是在中国广泛使用的免费上网安全软件。 360安全卫士会在安装过程中在用户系统上安装一个注册表操作程序，该程序可以被用来绕过操作系统的安全检查机制任意操作（设置、删除等）用户的注册表。由于该程序没有对调用者进行检查，导致任意程序（如各种木马程序等）可以通过该后门任意操作（设置、删除等）用户的注册表系统。 该程序包括两个文件： 1...

Qihoo 360 Security Guard 6.1.5.1009 Privilege Escalation

Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Security Guard, which can be exploited by malicious, local users to gain escalated privileges. An error in the...

360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie

Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Security Guard, which can be exploited by malicious, local users to gain escalated privileges. An error in the...

Qihoo 360 Security Guard privilege escalation

IOCTL privilege escalation...

Qihoo 360 Security Guard breg device drivers Privilege Escalation

Exploit for unknown platform in category local exploits =============================================================================== Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability =============================================================================== /...

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation / Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is ver...

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation

/ Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Securit...

openSUSE Security Update : python (python-360)

Integer Overflows in the python imageop module potentially allowed attackers to execute arbitrary code CVE-2008-4864. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update python-360. The text...

How to break the Xbox 360 security model

This Google Tech Talk features Michael Steil and Felix Domke discussing the security model of the Microsoft Xbox 360 and how to break it...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

Fortify 360 Web Interface Detection

The remote web server is running the web interface for Fortify 360, a web interface to analyze the results of source code audits. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc...

世界之窗(The World)浏览器地址栏欺骗漏洞

世界之窗浏览器是一款小巧、快速、安全、功能强大的多窗口浏览器，它是完全免费，没有任何功能限制的绿色软件。世界之窗浏览器兼容微软IE浏览器，可运行于微软windows98/ME/2000/XP/Vista系列操作系统上，它使用IE浏览器相同的内核，因此网页显示效果可以与IE浏览器完全相同，推荐您同时安装IE6.0版或者更高的版本。世界之窗浏览器由凤凰工作室出品，它完全免费，没有任何功能限制，不捆绑任何第三方软件，可以干净卸载，请您放心使用。不同于常见的其它IE内核浏览器，世界之窗浏览器使用C++和Win32...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

Gear Software CD DVD Filter driver privilege escalation vulnerability

Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...

Preliminary validation of my thoughts--about 3 6 0 safe guard of self-protection-vulnerability warning-the black bar safety net

About 3 6 0 security guards（3 6 0 safe of self-preservation, I see a lot of advertising, but have not been to research. Today was evacuated carefully looked at because it is doubts it. The program in the kernel just hung up two Hook（KiSystemService, the KeUserModeCallback, then how is it possible...