Integer overflow

Integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the IPEEK ioctl...

CVE-2007-5225

Integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the IPEEK ioctl...

CVE-2007-5225: Undefined Security Weakness

Integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the IPEEK ioctl...

Sun Solaris FIFO filesystem information leak

Integer overflow on IOCTL processing allows large memory regions reading...

Input validation

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654: Improper Input Validation

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

Symantec Antivirus privilege escalation

It's possible to overwrite system memory regions with IOCTL 0x83022323 of symTDI device...

Debian DSA-1363-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2172 Thomas Graf reported a typo in the IPv4...

Buffer overflow

The nvcoaft51 driver in Norman Virus Control NVC 5.82 uses weak permissions unrestricted write access for the NvcOa device, which allows local users to gain privileges by 1 triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by 2 sending a crafted KEVENT...

Norman Virus Control nvcoaft51.sys ioctl BF672028 Exploit

No description provided by source. / Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstract nvcoaft51.sys driver receive as parameter in some ioctl's a pointer to a KEVENT struct, calling KeSetEvent without any prior check. The device created by the driver NvcOa can be opened by any...

norton-local.txt

/ Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstract nvcoaft51.sys driver receive as parameter in some ioctl's a pointer to a KEVENT struct, calling KeSetEvent without any prior check. The device created by the driver NvcOa can be opened by any user. As result, a user can send a...

CVE-2007-4648: Improper Restriction of Operations within the Bounds of a Memory Buffer

The nvcoaft51 driver in Norman Virus Control NVC 5.82 uses weak permissions unrestricted write access for the NvcOa device, which allows local users to gain privileges by 1 triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by 2 sending a crafted KEVENT...

Norman Virus Control - nvcoaft51.sys ioctl BF672028

Norman Virus Control - nvcoaft51.sys ioctl BF672028 / Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstract nvcoaft51.sys driver receive as parameter in some ioctl's a pointer to a KEVENT struct, calling KeSetEvent without any prior check. The device created by the driver NvcOa can b...

Norman Virus Control - 'nvcoaft51.sys' ioctl BF672028

/ Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstract nvcoaft51.sys driver receive as parameter in some ioctl's a pointer to a KEVENT struct, calling KeSetEvent without any prior check. The device created by the driver NvcOa can be opened by any user. As result, a user can send a...

Norman Virus Control nvcoaft51.sys ioctl BF672028 Exploit

Exploit for unknown platform in category local exploits ========================================================= Norman Virus Control nvcoaft51.sys ioctl BF672028 Exploit ========================================================= / Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstrac...

CVE-2007-4591

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

CVE-2007-4591: Undefined Security Weakness

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

Buffer overflow

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service crash and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large...