Cross site scripting

Cross-site scripting XSS vulnerability in the report interface in Internet Security Systems ISS Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1073

Cross-site scripting XSS vulnerability in the report interface in Internet Security Systems ISS Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1073

Internet Scanner 7.0 SP2 (Build 7.2.2005.52) from ISS is affected by a cross-site scripting (XSS) vulnerability in its report generation/printing function. The JVN entry clarifies that the reporting engine does not properly sanitize data when generating the HTML report, enabling an attacker to in...

cygwin-overflow.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2007-005 - Original release date: May 23rd, 2007 - Last revised: November 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

[ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS

============================================= INTERNET SECURITY AUDITORS ALERT 2006-004 - Original release date: April 18, 2006 - Last revised: November 13, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 1/5 ============================================= I. VULNERABILITY...

Website vulnerability 2 5 $ 8 $ 8 the genuine card bar-vulnerability warning-the black bar safety net

Two days ago on the Internet to see someone using Kaspersky official sales site of vulnerability, spending 2 to 5 Yuan to buy a value of 8 is 8 yuan a year genuine Kaspersky. Try holding the mood, according to the above steps to try it out. 1, Click on the Enter Kaspersky old users to upgrade pag...

CVE-2007-4277

The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions Everyone:Write for the \.\Tmfilter device, which allows local users to send arbitrary content to the device via the...

CVE-2007-5086

CVE-2007-5086 concerns Kaspersky Anti-Virus/Internet Security 7.0.0.125 where SSDT and Shadow SSDT parameter validation is insufficient, enabling local users to trigger a crash (DoS) via kernel hooks in kylif.sys (NtUserSendInput, LoadLibraryA, NtOpenProcess, NtOpenThread, NtTerminateProcess, NtU...

Code injection

Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to 1 cause a denial of service crash and possibly gain privileges via the NtCreateSection kernel SSDT hook or 2 cause a denial of...

CVE-2007-5047

Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutan...

Code injection

Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutan...

CVE-2007-5043

Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to 1 cause a denial of service crash and possibly gain privileges via the NtCreateSection kernel SSDT hook or 2 cause a denial of...

CVE-2007-5043

Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to 1 cause a denial of service crash and possibly gain privileges via the NtCreateSection kernel SSDT hook or 2 cause a denial of...

CVE-2007-5047

The vulnerability CVE-2007-5047 affects Norton Internet Security 2008 (build 15.0.0.60) where NtOpenSection SSDT hooks are not properly validating parameters passed to SSDT function handlers, enabling local users to trigger a crash (DoS) and potentially gain privileges via the kernel NtOpenSectio...

CVE-2007-5043

The CVE-2007-5043 entry affects Kaspersky Internet Security 7.0.0.125, where the kernel driver layer (kylif.sys) does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers. This insecure handling enables local attackers to cause a denial of service (...

CVE-2007-5047

Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutan...

Symantec Norton NavComUI ActiveX control vulnerability

Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...

Symantec Norton NavComUI ActiveX control vulnerability

Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...

Information disclosure

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...

CVE-2007-4649

CVE-2007-4649 impacts MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1. The underlying issue is weak permissions (Everyone: Full Control) on installation directory trees, enabling local users to replace application files (e.g., traysser.exe) and pote...