PT-2012-1370 · Defensewall · Defensewall Personal Firewall

Name of the Vulnerable Software and Affected Versions: DefenseWall Personal Firewall version 3.00 Description: A race condition in DefenseWall Personal Firewall on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a...

PT-2012-1366 · Bitdefender · Bitdefender Total Security

Name of the Vulnerable Software and Affected Versions: BitDefender Total Security 2010 version 13.0.20.347 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-base...

PT-2012-1392 · Vba32 · Vba32 Personal

Name of the Vulnerable Software and Affected Versions: VBA32 Personal version 3.12.12.4 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during hook-handler...

PT-2012-1374 · G Data · G Data Totalcare

Name of the Vulnerable Software and Affected Versions: G DATA TotalCare version 2010 Description: A race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1382 · Online Solutions · Online Solutions Security Suite

Name of the Vulnerable Software and Affected Versions: Online Solutions Security Suite version 1.5.14905.0 Description: A race condition exists in the software, allowing local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked. This is achieved...

PT-2012-1395 · Webroot · Webroot Internet Security Essentials

Name of the Vulnerable Software and Affected Versions: Webroot Internet Security Essentials version 6.1.0.145 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes...

Researchers Create Hypervisor Tool for Rootkits

Research between North Carolina State and Microsoft has garnered a way to better isolate and centralize kernels–up to 6,000 different kernel hooks–and has stopped nine rootkits. The tool is called HookSafe and runs on Ubuntu Linux 8.04 and uses hardware-based memory. At issue is whether other...

Code injection

Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via kernel SSDT hooks for 1 NtOpenProcess and 2 NtOpenThread...