iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

Rogue AV Scam Targets Google PageRank

An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...

Mac OS X Mega-Update Fixes 33 Security Defects

Apple today shipped another Mac OS X mega-update with fixes for at least 33 serious security problems affecting Mac OS X users. The update includes patches for third party components like Adobe’s Flash Player plug-in, Clam AV, MySQL and PHP. A separate update was released for Snow Leopard to fix...

Design/Logic Flaw

Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, wh...

CVE-2009-2450: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHODNEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as...

F-PROT AntiVirus Security Bypass Vulnerability (Linux)

The host is installed with F-PROT AntiVirus and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodf-protavsecbypassvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ F-PROT AntiVirus Security Bypass Vulnerability Linux Authors: Nikita MR Copyright: Copyright c 2009...

F-PROT AntiVirus Security Bypass Vulnerability - Linux

F-PROT AntiVirus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

McAfee Products Security Bypass Vulnerability (Windows)

This host is installed with McAfee products and are prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmcafeeprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ McAfee Products Security Bypass Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009...

McAfee Products Security Bypass Vulnerability (SB10001) - Linux

McAfee products are prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1348

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via 1 an invali...

CVE-2009-1348

CVE-2009-1348 affects McAfee antivirus products (VirusScan, Total Protection, Internet Security, SecurityShield for ISA Server/SharePoint, Security for Email Servers/Email Gateway, Active Virus Defense, etc.). The issue is a virus-detection bypass caused by malformed archive metadata in ZIP/RAR f...

CVE-2009-1348

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via 1 an invali...

Kaspersky (Multiple Products) - klim5.sys Local Privilege Escalation

Kaspersky Multiple Products - klim5.sys Local Privilege Escalation source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A...

Kaspersky (Multiple Products) - 'klim5.sys' Local Privilege Escalation

source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A local attacker can exploit this issue to execute arbitrary code with...

CVE-2009-0332

Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...

Sql injection

Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...

CVE-2009-0332

CVE-2009-0332 affects AV Book Library prior to 1.1, with multiple SQL injection flaws in components including admin/edit.php, admin/add.php, and lib/book_search.php. The root cause is unsanitized/unspecified parameters enabling remote attackers to execute arbitrary SQL commands. The CVE has a Hig...

CVE-2009-0332

Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...

CVE-2009-0332: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...

Mandrake Security Advisory MDVSA-2009:016 (xen)

The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...