CVE-2009-3931

The CVE refers to an incomplete blacklist in Google Chrome’s browser/download/download_exe.cc that, in Chrome before 3.0.195.32, could cause a remote attacker to force downloads of certain dangerous files via Content-Disposition: attachment (examples include .mht/.mhtml with IE6, .svg with Safari...

Kingsoft Internet Security 9 - Denial of Service

Kingsoft Internet Security 9 - Denial of Service Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introductio...

Kingsoft Internet Security 9 Denial of Services

Exploit for unknown platform in category dos / poc =============================================== Kingsoft Internet Security 9 Denial of Services =============================================== Title: Kingsoft Internet Security 9 Denial of Services CVE-ID: OSVDB-ID: Author: Francis Provencher...

Kingsoft Internet Security 9 - Denial of Service

Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report Timeline 3 Technical details 4 The Cod...

Multiple Panda Security Products Local Privilege Escalation Vulnerability

No description provided by source. Application: Panda Global Protection 2010 Panda Internet Security 2010 Platforms: Windows XP Professional SP & windows Vista SP1 Exploitation: Local Privilege Escalation Date: 2009-10-27 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec...

Norton Internet Security 2004 symspam.dll Buffer Overflow (CVE-2004-0363)

Norton Internet Security 2004 is an all-in-one security solution for the desktop. One of the main features of Norton Internet Security 2004 is the ability to integrate with a users mail client and install spam filters on incoming mail. This feature of Norton Internet Security 2004 is called...

PT-2009-5870 · Ca · Ca Anti-Virus For The Enterprise +3

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009 Description: The issue is related to a crafted RAR archive file...

Quick Heal Local Privilege Escalation Vulnerability

ShineShadow Security Report 13102009-11 TITLE Quick Heal Local Privilege Escalation Vulnerability BACKGROUND Quick Heal Technologies is leading provider of AntiVirus and Internet Security tools and is leader in Anti-Virus Technology in India. A privately held company, Quick Heal Technologies Pvt...

PT-2009-5869 · Ca · Ca Anti-Virus For The Enterprise +3

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009 Description: The issue is related to a crafted RAR archive file...

Quick Heal 10.00 SP1 - Local Privilege Escalation

ShineShadow Security Report 13102009-11 TITLE Quick Heal Local Privilege Escalation Vulnerability BACKGROUND Quick Heal Technologies is leading provider of AntiVirus and Internet Security tools and is leader in Anti-Virus Technology in India. A privately held company, Quick Heal Technologies Pvt...

CA杀毒引擎arclib库多个内存破坏漏洞

BUGTRAQ ID: 36653 CVE ID: CVE-2009-3587,CVE-2009-3588 Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品杀毒引擎所使用的arclib组件在解析畸形RAR压缩文件时存在堆或栈内存破坏，用户受骗打开恶意文件就会导致拒绝服务或执行任意指令。 Computer Associates eTrust Intrusion Detection 3.0 SP1 Computer Associates eTrust Intrusion Detection 3.0 Computer...

Google Exec Calls For ISPs to Get Tough on Botnets

GENEVA — Head of Google’s anti-malvertising team Eric Davis wants Internet Service Providers ISPs to look beyond profits and take a more proactive approach to dealing with malware-infested computers on their networks. During a keynote presentation at the Virus Bulletin conference here, Davis said...

Google: Cooperation Needed to Combat Malicious Ads

GENEVA — A more comprehensive and serious level of cooperation among industry leaders is needed to help stop the scourge of malicious Web ads and botnets that result from the infected PCs, a top Google executive said Wednesday. Eric Davis, the head of anti-malvertising at Google, speaking to a...

Legitimate Sites Fertile Ground for Malware

The Web is a dirty, hostile place not fit for use by most decent people, a place where even many seemingly legitimate sites are infested with malware, password-stealing Trojans and all manner of other nasty applications. And it’s getting worse by the minute, according to a new threat report from...

CVE-2009-3104

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning i...

CVE-2009-3104

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning i...

CVE-2009-3104

Technical details about CVE-2009-3104 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

Hackers can invade Vientiane, the server of the method of analysis-vulnerability warning-the black bar safety net

Today, many Internet cafes have installed a Vientiane cafe management system, this system brings convenience is obvious. However, the more convenient the system The existence of security risks is greater, many hackers will come up with a hack of this management system approach, and some can even...

Adobe Acrobat < 8.1.3 Multiple Vulnerabilities

The version of Adobe Acrobat installed on the remote host is earlier than 9.0 / 8.1.3. Such versions are reportedly affected by multiple vulnerabilities : - There is a published denial of service issue. CVE-2008-2549 - A stack-based buffer overflow when parsing format strings containing a floatin...