CVE-2017-17801

CVE-2017-17801 affects TG Soft Vir.IT eXplorer Lite 8.5.65 via the VIRAGTLT.SYS driver. The vulnerability arises from not validating input values sent to IOCTL 0x8273E060, enabling a local attacker to cause a denial of service (BSOD) or potentially other unspecified impact. Connected sources corr...

CVE-2017-17800

The CVE-2017-17800 entry concerns TG Soft Vir.IT eXplorer Lite 8.5.65. The vulnerable component is the kernel driver VIRAGTLT.SYS, where input values passed via IOCTL 0x8273A0A0 are not properly validated, enabling local users to trigger a denial of service (BSOD) and potentially other unspecifie...

CVE-2017-17802

CVE-2017-17802 affects TG Soft Vir.IT eXplorer Lite 8.5.65 via the VIRAGTLT.SYS driver. The vulnerability arises from not validating input values passed to IOCTL 0x8273E080, enabling a local attacker to trigger denial of service (BSOD) and potentially other unspecified impact. Connected sources c...

CVE-2017-17796

CVE-2017-17796 affects TG Soft Vir.IT eXplorer Lite 8.5.65. The vulnerability resides in the driver VIRAGTLT.SYS, where input values are not validated via IOCTL 0x827300A4, allowing a local attacker to trigger a denial of service (BSOD) and potentially other impact. Connected sources consistently...

CVE-2017-17801

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E060...

CVE-2017-17798

In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800...

Windows: Uninitialized variable in jscript!JsArraySlice(CVE-2017-11855)

There is an uninitialized variable vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - By opening a malicious web page in Internet Explorer. - currently untested An attacker on the local network could exploit this issue by posing as a WPAD Web Proxy...

Windows: use-after-free in jscript!NameTbl::GetValDef(CVE-2017-11903)

There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this issue by posing as a WPAD Web Proxy Auto-Discovery host and sending a malicious wpad.dat file to the victim. This works...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37938)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fai...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37937)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fai...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37939)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A security vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fails to...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37935)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fai...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37940)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fai...

Microsoft Internet Explorer Scripting Engine Information Disclosure (CVE-2017-11906)

An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way the scripting engine improperly handles objects in memory in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with ...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37941)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A security vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fails to...

Microsoft Windows - jscript!JsArraySlice Uninitialized Variable

Microsoft Windows - jscript!JsArraySlice Uninitialized Variable var x = new URIErrornew Array, undefined, undefined; String.prototype.localeCompare.callx, new Date0, 0, 0, 0, 0, 0, undefined; Array.prototype.slice.call1; !-- ============================================ Technical details: The issu...

Microsoft Internet Explorer 11 - jscript!JSONStringifyObject Use-After-Free

Microsoft Internet Explorer 11 - jscript!JSONStringifyObject Use-After-Free var o1 = toJSON:function alert'o1'; return o2; var o2 = toJSON:function alert'o2'; CollectGarbage; return 'x'; JSON.stringifyo1; g df8.e48: Access violation - code c0000005 first chance First chance exceptions are reporte...

Microsoft Windows - 'jscript!RegExpComp::Compile' Heap Overflow Through IE or Local Network via WPAD

var s = 'a'; forvar i=0;i !-- ============================================ PoC for WPAD: ========================...

Microsoft Windows - 'jscript!JsArraySlice' Uninitialized Variable

var x = new URIErrornew Array, undefined, undefined; String.prototype.localeCompare.callx, new Date0, 0, 0, 0, 0, 0, undefined; Array.prototype.slice.call1; !-- ============================================ Technical details: The issue is in jscript!JsArraySlice Array.prototype.slice.call in the P...

Microsoft Internet Explorer 11 - 'jscript!JSONStringifyObject' Use-After-Free

var o1 = toJSON:function alert'o1'; return o2; var o2 = toJSON:function alert'o2'; CollectGarbage; return 'x'; JSON.stringifyo1; g df8.e48: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled...