88 matches found
Trend Micro病毒扫描引擎Tmxpflt.sys多个本地安全漏洞
BUGTRAQ ID: 26209 CVECAN ID: CVE-2007-4277 Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro病毒扫描引擎的驱动实现上存在多个安全漏洞，本地攻击者可能利用此漏洞提升权限。 Trend Micro的杀毒引擎中所捆绑的Tmxpflt.sys驱动中没有对\.\Tmfilter DOS设备接口设置安全的权限，允许Everyone写访问，因此任何本地登录的用户都可以访问仅有特权用户才可以访问的功能。 此外这个DOS设备接口的IOCTL...
Trend Micro Scan Engine Tmxpflt.sys Buffer Overflow
The version of Trend Micro AntiVirus installed on the remote Windows host contains a buffer overflow in its 'Tmxpflt.sys' kernel driver. A local attacker may be able to leverage this issue to execute arbitrary code on the affected system in kernel context. C Tenable Network Security, Inc...
iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability
Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability iDefense Security Advisory 10.25.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 25, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine provides AntiVirus capabilities to desktop, server, and gateway system...
CVE-2006-4277
CVE-2006-4277 concerns multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the TNLIB_DIR parameter to include/novalib/class.novaAdmin.mysql.php or novalib/class.novaRead.mysql.php. Severi...
CVE-2005-4277
Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2005-4277
CVE-2005-4277 is an XSS vulnerability in toendaCMS prior to 0.7 Beta. The flaw resides in index.php where the id parameter can be manipulated to inject arbitrary script/HTML, enabling remote attackers to execute client-side code. Affected product: toendaCMS (before 0.7 Beta). The provided documen...
