[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

KLA10414 ACe vulnerability in Avast! Antivirus

Improper input validation was found in Avast! Antivirus. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed IOCTL request. Original advisories - Related products...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:034)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an...

CVE-2009-3080

Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...

CVE-2009-3080

Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...

CVE-2009-4004

Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...

CVE-2009-3080

Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...

CVE-2008-7107

easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...

Design/Logic Flaw

Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer...

CVE-2008-6962

Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer...

CVE-2008-6962

CVE-2008-6962 affects Avira AntiVir products (Premium/ Premium Security Suite/ Professional/ Personal - FREE). The issue stems from a crafted IOCTL request that overwrites a kernel pointer, enabling local code execution. NVD lists CVSSv2 base score 7.2 (HIGH) with LOCAL attack, low complexity, no...

Cross site request forgery (csrf)

The IATA ata driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service kernel panic via a certain IOCTL request with a large count, which triggers a malloc call with a large value...

CVE-2009-2649

The IATA ata driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service kernel panic via a certain IOCTL request with a large count, which triggers a malloc call with a large value...

Design/Logic Flaw

The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service system crash or gain privileges via a crafted IOCTL request, as demonstrated by executi...

NOD32 3.0/ESET Smart Security < 3.0.684 Local Privilege Escalation

NOD32 3.0/ESET Smart Security is installed on the remote host. The installed version is older than 3.0.684. Such versions are reportedly affected by a local privilege escalation issue. By sending a specially crafted request to an IOCTL request handler in 'epfw.sys', a local user may be able to...

CVE-2008-5725

The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...

Design/Logic Flaw

The PGPwded device driver aka PGPwded.sys in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service system crash and possibly gain privileges via a certain METHODBUFFERED IOCTL request that overwrites portions of memory, related to a "Driv...

Cross site request forgery (csrf)

The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...

CVE-2008-5725

The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...

Anti-Trojan Elite 4.2.1 - Atepmon.sys IOCTL Request Local Overflow Local Privilege Escalation

Anti-Trojan Elite 4.2.1 - Atepmon.sys IOCTL Request Local Overflow Local Privilege Escalation source: https://www.securityfocus.com/bid/32202/info ISecSoft Anti-Trojan Elite and Anti-Keylogger Elite are prone to multiple local privilege-escalation vulnerabilities. An attacker can exploit these...