6255 matches found
kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised
The ATI Rage 128 aka r128 driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine CCE state initialization, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly gain privileges via unspecified ioctl...
Linux Kernel Ext4 'move extents' ioctl本地特权提升漏洞
Bugraq ID: 37277 CVE ID：CVE-2009-4131 Linux是一款开放源代码的操作系统。 处理"EXT4IOCMOVEEXT" IOCTL时缺少充分的访问检查，本地攻击者发送特殊构建的IOCTL可以ROOT权限覆盖系统任意文件，导致拒绝服务或特权提升。 Linux kernel 2.6.31 5 Linux kernel 2.6.31 .2 Linux kernel 2.6.31 -rc7 Linux kernel 2.6.31 -rc6 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0...
CVE-2009-4306
CVE-2009-4306 concerns the Linux kernel’s ext4 filesystem, specifically the EXT4_IOC_MOVE_EXT (move extents) ioctl in 2.6.32-git6 and earlier. The vulnerability enables local users to trigger a denial of service through filesystem corruption via unknown vectors, and is described as distinct from ...
Linux kernel multiple security vulnerabilities
Crash on malformed IP packet defragmentation, privilege escalation with Ext4 "move extents" ioctl...
Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability
The host is installed with Kaspersky Anti-Virus 2010 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyav2010dosvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability Authors: Veerendra GG Copyright: Copyrig...
Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability
Kaspersky Anti-Virus 2010 is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Memory corruption
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service system crash via IOCTL requests using crafted kernel addresses that trigger memory corruption,...
avast! 'aswRdr.sys' Buffer Overflow Vulnerability
avast! AntiVirus is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avast:antivirus";...
CVE-2009-4049
Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024...
Heap overflow
Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024...
CVE-2009-4049
The CVE-2009-4049 entry concerns avast! AntiVirus for Windows (Home/Professional 4.8.1356.0) with a heap-based buffer overflow in the aswRdr.sys kernel driver (the TDI RDR driver). The underlying issue is a memory corruption condition triggered by crafted arguments sent to IOCTL 0x80002024, which...
CVE-2009-4049
Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024...
CVE-2009-3080
Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...
CVE-2009-3080
Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...
CVE-2009-4004
Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...
CVE-2009-3080
Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...
Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation
http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html =============Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation================ Authors: Giuseppe 'Evilcry' Bonfa' AbdulAziz Hariri E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org...
Kaspersky Antivirus memory corruption
Memory corruption on IOCTL processing...
Kaspersky Anti-Virus 2010 <= 9.0.0.463 pointer dereference vulnerability
/ Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Patch Updated : 2009/11/16 Found by : Heurs This Advisory : Heurs Contact : [email protected] //----- Application description The most trusted virus and...