Micropoint Proactive Denfense privilege escalation

User-controlled kernel memory access on IOCTL processing...

CVE-2010-0705

Summary: CVE-2010-0705 affects Avast! Antivirus on Windows, involving the kernel driver aavmker4.sys. The vulnerability arises from improper input validation in IOCTL 0xb2d60030, enabling memory corruption that can cause a denial of service or allow local privilege escalation. Affected products i...

[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

Avast! antiviral applications memory corruption

Memory corruption on IOCTL processing in aavmker4.sys...

KLA10414 ACe vulnerability in Avast! Antivirus

Improper input validation was found in Avast! Antivirus. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed IOCTL request. Original advisories - Related products...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:034)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an...

Solaris/Open Solaris UCODE_GET_VERSION IOCTL Denial of Service

No description provided by source. / cve-2010-0453.c -- Patroklos Argyroudis, argp at domain census-labs.com Denial of service kernel panic PoC exploit for the UCODEGETVERSION ioctl NULL pointer dereference vulnerability on Solaris/OpenSolaris: http://www.trapkit.de/advisories/TKADV2010-001.txt...

SolarisOpen Solaris UCODE_GET_VERSION IOCTL - Denial of Service

SolarisOpen Solaris UCODEGETVERSION IOCTL - Denial of Service / cve-2010-0453.c -- Patroklos Argyroudis, argp at domain census-labs.com Denial of service kernel panic PoC exploit for the UCODEGETVERSION ioctl NULL pointer dereference vulnerability on Solaris/OpenSolaris:...

Solaris/Open Solaris UCODE_GET_VERSION IOCTL - Denial of Service

/ cve-2010-0453.c -- Patroklos Argyroudis, argp at domain census-labs.com Denial of service kernel panic PoC exploit for the UCODEGETVERSION ioctl NULL pointer dereference vulnerability on Solaris/OpenSolaris: http://www.trapkit.de/advisories/TKADV2010-001.txt...

Sun Solaris CODE_GET_VERSION IOCTL本地拒绝服务漏洞

BUGTRAQ ID: 38016 CVE ID: CVE-2010-0453 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的内核中负责处理UCODEGETVERSION IOCTL请求的代码中存在空指针引用漏洞，本地用户可以通过发送特制的IOCTL请求导致拒绝服务。以下是intel/io/ucodedrv.c中的有漏洞代码段： .. static int ucodeioctldevt dev, int cmd, intptrt arg, int mode, credt cr, int rval .. switch cmd case...

kernel: gdth: Prevent negative offsets in ioctl

Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...

Qihoo 360 Security Guard privilege escalation

IOCTL privilege escalation...

Rising Antivirus privilege escalation

IOCTL privilege escalation...

瑞星杀病毒多个IOCTL请求处理本地特权提升漏洞

Bugraq ID: 37951 RISING Antivirus 2008/2009是国内流行的杀病毒程序。 RISING Antivirus 2008/2009不正确处理IOCTL请求，本地攻击者可以利用漏洞提升特权。 部分设备驱动RsNTGdi.sys, HookCont.sys, HookNtos.sys, HOOKREG.sys和HookSys.sys在处理IOCTLs请求时存在错误，提交特殊构建的IOCTL可破坏内核内存，导致以内核空间上下文执行任意代码。 Rising Antivirus International Rising Antivirus 2009 Rising...

TheGreenBow VPN Client privilege escalation

Buffer overflow on IOCTL processing in tgbvpn.sys...

kernel: gdth: Prevent negative offsets in ioctl

Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...

Linux Kernel fuse_ioctl_copy_user()函数本地拒绝服务漏洞

BUGTRAQ ID: 37453 CVECAN ID: CVE-2009-4410 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的fuse内核代码的ioctl处理器中存在拒绝服务漏洞，本地用户在某些环境下调用fuseioctlcopyuser可能会导致系统忙碌。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised

The ATI Rage 128 aka r128 driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine CCE state initialization, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly gain privileges via unspecified ioctl...

Linux Kernel Ext4 'move extents' ioctl本地特权提升漏洞

Bugraq ID: 37277 CVE ID：CVE-2009-4131 Linux是一款开放源代码的操作系统。 处理"EXT4IOCMOVEEXT" IOCTL时缺少充分的访问检查，本地攻击者发送特殊构建的IOCTL可以ROOT权限覆盖系统任意文件，导致拒绝服务或特权提升。 Linux kernel 2.6.31 5 Linux kernel 2.6.31 .2 Linux kernel 2.6.31 -rc7 Linux kernel 2.6.31 -rc6 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0...

CVE-2009-4306

CVE-2009-4306 concerns the Linux kernel’s ext4 filesystem, specifically the EXT4_IOC_MOVE_EXT (move extents) ioctl in 2.6.32-git6 and earlier. The vulnerability enables local users to trigger a denial of service through filesystem corruption via unknown vectors, and is described as distinct from ...