Angler Exploit Kit Evading EMET

We recently encountered some exploits from Angler Exploit Kit EK that are completely evading Microsoft’s Enhanced Mitigation Experience Toolkit EMET. This is something we are seeing for the first time in the wild, and we only observed it affecting systems running Windows 7. Angler EK uses complex...

Angler Exploit Kit Evading EMET

We recently encountered some exploits from Angler Exploit Kit EK that are completely evading Microsoft’s Enhanced Mitigation Experience Toolkit EMET. This is something we are seeing for the first time in the wild, and we only observed it affecting systems running Windows 7. Angler EK uses complex...

AVG Internet Security 2015.5736 Address Space Layout Disclosure

The AVG Internet Security application installed on the remote Windows host is a version between 2015.5315 through 2015.5751, inclusive, with a virus definition database prior to version 9364. It is, therefore, affected by an information disclosure vulnerability due to insecure allocation of memor...

Kaspersky Total Security Security Bypass Vulnerability

Kaspersky Total security is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee VirusScan Enterprise DEP Bypass

The vulnerability of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security anti-virus tools is related to the allocation of memory with read, write, and execute permissions during the protection of user processes. Exploiting this vulnerability can allow a malicious actor...

McAfee VirusScan Enterprise Security Bypass Vulnerability (Jan 2016) - Windows

McAfee VirusScan Enterprise is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8578

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

Design/Logic Flaw

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

Buffer overflow

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

Design/Logic Flaw

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8577

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

CVE-2015-8577

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

CVE-2015-8578

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8577

Summary: CVE-2015-8577 affects McAfee VirusScan Enterprise prior to 8.8 Patch 6. The vulnerability lies in the Buffer Overflow Protection (BOP) feature, which allocates memory with Read/Write/Execute (RWX) permissions at predictable addresses on 32‑bit systems while protecting another application...

CVE-2015-8578

AVG Internet Security 2015 is affected by an information disclosure/vulnerability where memory is allocated with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user‑mode processes. This RWX/predictable-address pattern enables bypassing DEP and ASLR protections via...

CVE-2015-8579

The CVE targets Kaspersky Total Security 2015 (version 15.0.2.361). The vulnerability arises from memory allocations that use Read, Write, Execute (RWX) permissions at predictable addresses while protecting user‑mode processes. This root cause enables bypass of DEP and ASLR protections. Details a...

CVE-2015-8578: Undefined Security Weakness

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

PT-2015-3026

Name of the Vulnerable Software and Affected Versions AVG Internet Security version 2015 Description The issue allows attackers to bypass the DEP and ASLR protection mechanisms. This is due to the allocation of memory with Read, Write, Execute RWX permissions at predictable addresses when...