CVE-2015-1515

CVE-2015-1515 affects SoftSphere DefenseWall Personal Firewall 3.24. The dwall.sys driver allows local users to escalate privileges by writing to arbitrary memory locations through crafted IOCTLs (0x00222000, 0x00222004, 0x00222008, 0x0022200c, 0x00222010). Multiple sources corroborate a local pr...

CVE-2015-1515: Undefined Security Weakness

The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call...

CVE-2015-1305

McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 1 0x00224014 or 2 0x0022c018 IOCTL call...

CVE-2014-9642: Undefined Security Weakness

bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call...

CVE-2015-1305: Undefined Security Weakness

McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 1 0x00224014 or 2 0x0022c018 IOCTL call...

CVE-2014-9641: Undefined Security Weakness

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call...

PT-2015-4321

Name of the Vulnerable Software and Affected Versions K7 Computing Ultimate Security versions prior to 14.2.0.253 K7 Computing Anti-Virus Plus versions prior to 14.2.0.253 K7 Computing Total Security versions prior to 14.2.0.253 Description The issue allows local users to gain privileges by writi...

CVE-2014-2273: Undefined Security Weakness

The hx170dec device driver in Huawei P2-6011 before V100R001C00B043 allows local users to read and write to arbitrary memory locations via unspecified vectors...

PT-2014-4597

Name of the Vulnerable Software and Affected Versions Huawei P2-6011 versions prior to V100R001C00B043 Description The issue allows local users to read and write to arbitrary memory locations. Recommendations For versions prior to V100R001C00B043, update to V100R001C00B043 or later to resolve the...

CVE-2014-0972: Undefined Security Weakness

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

PT-2014-3987

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the kgsl graphics driver, which does not properly restrict write access to IOMMU context registers. This allows local users to select a custom page table and write to arbitrary memo...

CVE-2014-4971: Improper Input Validation

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to 1 the MQAC.sys driver in the MQ Access Control subsystem...

Microsoft WINS Service Memory Overwrite

No description provided by source. $Id: ms04045wins.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

PT-2014-47: Arbitrary memory write in Honeywell EPKS

The specialists of the Positive Research center have detected an Arbitrary memory write vulnerability in Honeywell EPKS. Arbitratry memory write was discovered in function readexactsilentmaster from dualonsrv.exe module which could lead to possible remote code execution or denial of service. How ...

CVE-2010-0430: Improper Restriction of Operations within the Bounds of a Memory Buffer

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H or rhev-hypervisor before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings...

CVE-2013-6282: Improper Input Validation

The 1 getuser and 2 putuser API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against...

CVE-2012-0864

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

CVE-2012-0864: Undefined Security Weakness

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

Another Java zero-day vulnerability being exploited in the wild

Do you still have Java installed? There is a bad news for you ! FireEye has detected yet another Java zero-day vulnerability being exploited in attacks in the wild. The vulnerability targets browsers that have the latest version of the Java plugin installed Java v1.6 Update 41 and Java v1.7 Updat...

CVE-2012-3516

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...