ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability

Hello, We would like to inform you about a vulnerability in ZoneAlarm 6. Description: ZoneAlarm insufficiently protects its driver Devicevsdatant against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open the driver's device and send arbitra...

Design/Logic Flaw

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...

intel-race.txt

Title: Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to...

Intel 2200BG W29N51.SYS驱动信标帧远程执行代码漏洞

Intel 2200BG是笔记本所使用的mini PCI无线网卡。 Intel 2200BG的网卡驱动W29N51.SYS在处理多个信标帧时存在竞争条件问题，如果攻击者向无线网卡发送了多个特制的信标帧的话，就会覆盖某些内核内存结构，导致执行任意代码。 Intel 2200BG W29N51.SYS 9.0.3.9 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.intel.com/support/graphics include unistd.h include sys/types.h include...

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption

/ Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrary code execution. This vulnerability is triggered when...

CA Anti-Virus多个驱动本地拒绝服务漏洞

CA Anti-Virus是一款杀毒软件。 CA Anti-Virus的vetfddnt.sys和vetmonnt.sys驱动没有正确地处理空缓冲区，允许本地攻击者通过一些IOCTL（METHODBUFFERED）操作导致蓝屏死机。 Computer Associates Anti-Virus for Vista Beta v8.2 Computer Associates Anti-Virus 2007 v8.1 Computer Associates Internet Security Suite 2007 v3.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-6496

CA vulnerability CVE-2006-6496 affects CA Anti-Virus 2007 v8.1, CA Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0, due to improper handling of NULL buffers in VetMONNT.sys and VetFDDNT.sys that allows a local administrator to crash the system via certain IOCTLs. The issue...

CVE-2006-5379

The accelerated rendering functionality of NVIDIA Binary Graphics Driver binary blob driver For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite...

ISS Protection Brief: Vulnerability in Server Driver could result in Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief July 28, 2006 Vulnerability in Server Driver could result in Denial of Service Summary: Multiple versions of Microsoft Windows are vulnerable to a null pointer dereference in the server driver srv.sys. By sending a...

Intel Graphics Accelerator Driver - Remote Denial of Service

Intel Graphics Accelerator Driver - Remote Denial of Service source: https://www.securityfocus.com/bid/16127/info The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an...

CVE-2004-1109

The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service CPU consumption and system freeze from infinite loop via a 1 TCP, 2 UDP, or 3 ICMP packet with a zero length IP Option field...

CVE-2002-1574

Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors...

CVE-2004-0535

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources...

Multiple Ethernet Driver Frame Padding Information Disclosure (Etherleak)

The remote host uses a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory allocated to the device driver, or a hardware buffer on its network interface card. Known as 'Etherleak', this information...

MS01-046: IrDA Driver Malformed Packet Remote DoS (252795)

The hotfix for the 'IrDA access violation patch' problem has not been applied. This vulnerability can allow an attacker who is physically near the W2K host to shut it down using a remote control. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10734;...

ml85p - driver for Samsung ML-85G and /tmp

ml85p - driver for Samsung ML-85G GDI printers seems to use /tmp unsecurely. it seems to use the time function to determine the /tmp files name. root@linux exp strings /usr/bin/ml85p | grep tmp /tmp/ml85gd 401070dd iopl0x3 = 0 400cf2bd timeNULL = 994462668 40100cbf brk0 = 0x8064544 40100cbf...

CVE-2024-33228

An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...