AVG Anti-Virus Crafted UPX File Handling Divide-by-zero Remote DoS

AVG Anti-Virus is installed on the remote Windows host. The version of AVG Anti-Virus installed on the remote host is affected by a 'UPX' file parsing flaw. An attacker can trigger a divide-by-zero error by causing the application to process a specially crafted 'UPX' file, which would result in a...

CVE-2008-3373: Undefined Security Weakness

The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service engine crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

AVG antivirus DoS

Division by zero on UPX files parsing...

[Full-disclosure] n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote)

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2008.004 28-Jul-2008 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Divide by Zero - DoS remote Risk: HIGH Vendor communication: 2008-07-10 n.runs contacted AVG 2008-07-10 AVG response 2008-07-10 n.runs...

Design/Logic Flaw

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

CVE-2008-0860

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

CVE-2008-0860

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

CVE-2008-0860

CVE-2008-0860 affects Kerio MailServer prior to 6.5.0 via the AVG plug-in, with an unspecified impact via unknown remote attack vectors related to null DACLs. The exact affected versions, root cause details, and remediation are not fully disclosed in the provided documents; exploitation status is...

CVE-2008-0860: Undefined Security Weakness

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs...

Code injection

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic...

CVE-2007-3777

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic...

CVE-2007-3777

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic...

CVE-2007-3777

CVE-2007-3777 affects AVG Anti-Virus versions with avg7core.sys (7.5.444, 7.5.446, 7.5.448). An internal function in avg7core.sys copies data to an arbitrary address via the IOCTL 0x5348E004 on the generic DeviceIoControl handler, enabling a local privilege escalation by providing arbitrary addre...

CVE-2007-3777: Undefined Security Weakness

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic...

AVG Anti-Virus本地特权提升漏洞

AVG Anti-Virus是一款反病毒应用程序。 AVG Anti-Virus不正确限制非特权用户写数据到内核内存，本地攻击者可以利用漏洞提升特权。 AVG Anti-Virus提供的服务驱动avg7core.sys存在问题，允许非特权用户写任意数据到任意地址。此驱动在它的通用DeviceIoControl处理器中支持两个IOCTLs，其中IOCTLs 0x5348E004用于获得核心驱动对用户模式组件上执行特权函数，由于设计错误，在没有进行任何检查就拷贝任意数据到用户模式应用程序提供的地址中。 AVG AVG Anti-Virus Free Edition 7.5.446 AVG A...

AVG Anti-virus avg7core.sys 0x5348E004 IOCTL Local Privilege Escalation

AVG Anti-Virus is installed on the remote Windows host. The version of AVG Anti-Virus on the remote host includes a kernel mode service driver, avg7core.sys, that allows a local user to write arbitrary data to arbitrary addresses. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

AVG AntiVirus < 7.5.476 avg7core.sys Local Privilege Escalation

Binary data 4131.prm...

AVG antivirus privilege escalation

IOCTL 0x5348E004 allows unprivileged user to write kernel memory...

Advisory: Arbitrary kernel mode memory writes in AVG

======= Summary ======= Name: Arbitrary kernel mode memory writes in AVG Antivirus Release Date: 10 July 2007 Reference: NGS00500 Discover: Jonathan Lindsay john-lindsay ngssoftware com Vendor: Grisoft Vendor Reference: N/A Systems Affected: Windows NT based systems Risk: High Status: Fixed...

jbrowser.txt

JBrowser acces to admin/config files By : sn0oPy Risk : high Dork : inurl:"JBrowser/index.php" exploit : juste replace the http://www.target.ma/jbrowser/index.php by http://www.target.ma/jbrowser/admin/ contact : [email protected] greetz : subzero, Avg...