CVE-2018-10018

The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument...

CVE-2018-10018

The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument...

CVE-2018-10018

The CVE-2018-10018 entry concerns G DATA Total Security 25.4.0.3, where the GDASPAMLib.AntiSpam ActiveX control (ASK\GDASpam.dll) suffers a buffer overflow triggered by a long IsBlackListed argument. The issue affects the ActiveX component within the Total Security suite; impact is described as p...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow Exploit

Exploit for windows platform in category dos / poc 'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackL...

G DATA TOTAL SECURITY 25.4.0.3 Active-X Buffer Overflow

===== Tempest Security Intelligence - ADV-24/2018 === G DATA TOTAL SECURITY v25.4.0.3 Activex Buffer Overflow Author: Filipe Xavier Oliveira Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents ===================================================== Overview Detailed...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow 'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackListed ByVal strIP As String As Long" m...

PT-2018-9607

Name of the Vulnerable Software and Affected Versions: G DATA Total Security version 25.4.0.3 Description: The issue is related to a buffer overflow in the GDASPAMLib.AntiSpam ActiveX control ASKGDASpam.dll. This buffer overflow can be triggered via a long IsBlackListed argument. Recommendations:...

G DATA Total Security 25.4.0.3 - Activex Buffer Overflow

'for debugging/custom prolog targetFile = "C:\Program Files\G DATA\TotalSecurity\ASK\GDASpam.dll" prototype = "Function IsBlackListed ByVal strIP As String As Long" memberName = "IsBlackListed" progid = "GDASPAMLib.AntiSpam...

CVE-2018-10018: Improper Restriction of Operations within the Bounds of a Memory Buffer

The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument...

Code injection

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call...

CVE-2014-3752

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call...

CVE-2014-3752

The CVE-2014-3752 entry details a local privilege escalation affecting G Data TotalProtection 2014 (versions up to 24.0.2.1). The vulnerability resides in the MiniIcpt.sys driver, where a crafted 0x83170180 call allows local users with administrator rights to execute arbitrary code with SYSTEM pr...

CVE-2014-3752

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call...

CVE-2014-3752: Undefined Security Weakness

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call...

PT-2018-4216

Name of the Vulnerable Software and Affected Versions G Data TotalProtection versions 24.0.2.1 and earlier Description The issue allows local users with administrator rights to execute arbitrary code with SYSTEM privileges. This is achieved via a crafted 0x83170180 call to the MiniIcpt.sys driver...

G-Data DLL Hijacking

Hi @ll, the executable installers of G-Data's "security" products for Windows, available from , allow escalation of privilege! The downloadable executables are self-extractors containing the real executable installer as resource: they create the subdirectory...

G DATA INTERNET SECURITY light - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application G DATA INTERNET SECURITY light published at the 'play' market has multiple vulnerabilities...

Malicious Minecraft apps affect 600,000 Android Users

So you love Minecraft? You might want to be very careful before downloading the cheats for the popular Minecraft game from Google Play Store. Nearly 3 Million users have downloaded malicious Minecraft Android applications for their smartphone and tablets from the Google Play store, security...

Powerful Linux Trojan 'Turla' Infected Large Number of Victims

Security researchers have discovered a highly nasty Linux trojan that has been used by cybercriminals in state sponsored attack in order to steal personal, confidential information from government institutions, military and pharmaceutical companies around the world. A previously unknown piece of ...

G Data TotalCare 2011 NtOpenKey Race Condition Vulnerability

No description provided by source. 1.Description: The HookCentre.sys kernel driver distributed with G Data TotalCare 2011 contains a race condition vulnerability in the handling arguments of NtOpenkey function. Exploitation of this issue allows an attacker to crash systemmake infamous BSoD or gai...