CVE-2007-3873

CVE-2007-3873 describes a stack-based buffer overflow in Trend Micro’s vstlib32.dll (1.2.0.1012) used by the SSAPI Engine in AntiSpyware 3.5 and PC-Cillin Internet Security 2007 (15.0–15.3), triggered when a long local file path is processed via a ReadDirectoryChangesW callback. Affects SSAPI Eng...

CVE-2007-2955

CVE-2007-2955 affects Symantec Norton product NavComUI.dll’s ActiveX controls AxSysListView32 and AxSysListView32OAA. The vulnerability arises from input validation errors when handling the properties “AnomalyList” and “Anomaly,” enabling a remote attacker to execute arbitrary code via specially ...

Multiple Panda Internet Security vulnerabilities

Weak installation folder permissions allow privilege escalation to LocalSystem on any logged in user account. Spam filtering can be controlled from malcrafted Web page...

Telecommunications is prohibited ADSL Router Internet crack method-vulnerability warning-the black bar safety net

Several methods are provided, everyone can try. ADSL share Internet access, there are two ways, one is proxy, one is the Address Translation（NAT），we often say that the routing is actually NAT mode, in fact the Routing and NAT principles there are still differences, there will not be discussed, no...

Kaspersky Internet Security privilege escalation

Invalid processing of SSDT hooked functions arguments...

Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities

Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities source: https://www.securityfocus.com/bid/24491/info Kaspersky Internet Security 6 is prone to multiple local vulnerabilities. Exploiting these vulnerabilities allows local attackers to crash affected computers, denying...

Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, We would like to inform you about a vulnerability in Kaspersky Internet Security 6. Description: Kaspersky Internet Security hooks many functions in SSDT and in at least nine cases it fails to validate arguments that come from the user mode. User calls to NtCreateKey, NtCreateProcess,...

Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities

source: https://www.securityfocus.com/bid/24491/info Kaspersky Internet Security 6 is prone to multiple local vulnerabilities. Exploiting these vulnerabilities allows local attackers to crash affected computers, denying service to legitimate users. Attackers might also be able to gain elevated...

CVE-2007-2965

CVE-2007-2965 concerns the Real-time Scanning component across multiple F-Secure products (Internet Security 2005–2007, Anti-Virus 2005–2007, and related Protection Service for Consumers 6.40 and earlier). The root cause is improper validation in IOCTL/I/O space handling, allowing a crafted I/O r...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the ISAlertDataCOM ActiveX Control ISLAert.dll provided by Symantec Norton Internet Security 2004. By sending an overly long string to the "Get" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Buffer overflow

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1689

The CVE-2007-1689 entry concerns a stack buffer overflow in the ISAlertDataCOM ActiveX control (ISLALERT.DLL) shipped with Norton Personal Firewall 2004 and Norton Internet Security 2004. The vulnerability is triggered by long arguments to the Get() and Set() methods of the ISAlertDataCOM control...

Symantec Norton Internet Security 2004 ISAlertDataCOM ActiveX control stack buffer overflow

Overview The Symantec Norton Internet Security 2004 ISAlertDataCOM ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Symantec Norton Internet Security is a software package for Windows...

Symantec Norton Internet Security 2006 COM对象安全绕过漏洞

Norton Internet Security 2006是一款可以对反间谍软件，病毒，反垃圾，恶意网络通信进行保护的安全套件。 Norton Internet Security 2006安装的ActiveX控件存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意代码。 Norton Internet Security 2006安装如下ActiveX控件注册为安全脚本： Progid: Symantec.Norton.AntiVirus.NAVOptions Clsid: 085ABFE2-D753-445C-8A2A-D4BD46CE0811 File: C:\Program...

iDefense Security Advisory 05.09.07: Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability

Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability iDefense Security Advisory 05.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 09, 2007 I. BACKGROUND Norton Internet Security 2006 is a comprehensive system security suite that offers protection from...

Symantec Norton Antivirus NAVOPTS.DLL ActiveX Control Remote Code Execution Vulnerability

Description Symantec Norton Antivirus ActiveX control is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits will allow attackers to execute arbitrary code in the context of th...

Security Best Practice: Protect Yourself against FTP Format Strings Attacks

The File Transfer Protocol FTP is used to connect computers over the Internet enabling file transferring between their users. FTP format string attacks are a common threat on vulnerable systems. Format string attacks can be used to crash a program or to execute malicious code. Successful format...

Heap overflow

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...