Memory corruption

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

CVE-2009-3522

CVE-2009-3522 concerns a stack-based buffer overflow in the aswMon2.sys driver of Avast! for Windows (as used in Home/Professional up to 4.8.1355). The vulnerability occurs when processing a crafted IOCTL request (IOCTL 0xb2c80018), allowing local users to crash the system (denial of service) and...

Kaspersky AV 2010 9.0.0.463 Local DoS

No description provided by source. include stdio.h include windows.h include winioctl.h include stdlib.h include string.h / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs...

Avast Antivirus privilege esclalation

Memory corruption on IOCTL processing...

Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation

No description provided by source. Source: https://www.evilfingers.com/advisory/Advisory/AvastaswMon2.syskernelmemorycorruptionandLocalPrivilegeEscalation.php -----------Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail:...

Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation

Exploit for unknown platform in category local exploits ======================================================= Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation ======================================================= Title: Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation CVE-ID:...

Linux Kernel z90crypt驱动本地权限提升漏洞

CVE ID: CVE-2009-1883 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的z90crypt驱动中的z90cryptunlockedioctl函数没有对Z90QUIESCE操作执行权限检查，这可能允许拥有有效用户ID（euid）为0的本地用户绕过预期的功能限制，执行非授权操作。 Linux kernel 2.6.9 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:1438-01）以及相应补丁: RHSA-2009:1438-01：Important: kernel...

kernel: missing capability check in z90crypt

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 21st July 2010 Added links to KBase articles expanding on three...

Design/Logic Flaw

easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...

CVE-2008-7107

easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...

CVE-2008-7107

easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...

Null pointer dereference

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

CVE-2009-0682

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service system crash via a crafted call...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

No description provided by source. Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/20...

CA20090818-02: Security Notice for CA Internet Security Suite

CA20090818-02: Security Notice for CA Internet Security Suite Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Internet Security Suite. A vulnerability exists that can allow a local attacker to cause a denial of service. CA has issued updates to...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

Exploit for unknown platform in category dos / poc =================================================== TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit =================================================== Author: Giuseppe 'Evilcry' Bonfa' Release Date: 15/08/2009...

TheGreenBow VPN Client - tgbvpn.sys Local Denial of Service

TheGreenBow VPN Client - tgbvpn.sys Local Denial of Service Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under constructi...

TheGreenBow VPN Client - 'tgbvpn.sys' Local Denial of Service

Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/2009...

CVE-2008-6962

Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer...