483 matches found
Kingsoft WebShield privilege escalation
Kernel memory overwrite on IOCTL processing...
Kingsoft WebShield KAVSafe.sys Privilege Escalation
Kingsoft WebShield KAVSafe.sys = 2010.4.14.6092010.5.23 Kernel Mode Local Privilege Escalation Vulnerability VULNERABLE PRODUCTS Kingsoft WebShield = 3.5.1.2 2010.5.23 Signature Date: 2010-5-23 2:33:54 And KAVSafe.sys = 2010.4.14.609 Signature Date：2010-4-14 13:42:26 DETAILS: Kavsafe.sys create a...
CVE-2010-2031
KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL 0x830020d4 on the KAVSafe device...
CVE-2010-2031
KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL 0x830020d4 on the KAVSafe device...
CVE-2010-2031
CVE-2010-2031 affects KAVSafe.sys 2010.4.14.609 and earlier (used with Kingsoft Webshield 3.5.1.2 and earlier). It allows local users to overwrite arbitrary kernel memory via a crafted IOCTL 0x830020d4 request to the KAVSafe device. The NVD entry documents a local-exploit scenario with a CVSSv2 b...
CVE-2010-2031: Improper Restriction of Operations within the Bounds of a Memory Buffer
KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL 0x830020d4 on the KAVSafe device...
Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Local Priv
Exploit for linux platform in category local exploits ============================================================================================= Kingsoft WebShield KAVSafe.sys = 2010.4.14.6092010.5.23 Kernel Mode Local Priv. Escalation...
Kingsoft Webshield 'KAVSafe.sys' 2010.4.14.609 (2010.5.23) - Kernel Mode Privilege Escalation
/ Kingsoft WebShield KAVSafe.sys = 2010.4.14.6092010.5.23 Kernel Mode Local Privilege Escalation Vulnerability VULNERABLE PRODUCTS Kingsoft WebShield = 3.5.1.2 2010.5.23 Signature Date: 2010-5-23 2:33:54 And KAVSafe.sys = 2010.4.14.609 Signature Date2010-4-14 13:42:26 DETAILS: Kavsafe.sys create ...
Kingsoft Webshield KAVSafe.sys 2010.4.14.609 (2010.5.23) - Kernel Mode Privilege Escalation
Kingsoft Webshield KAVSafe.sys 2010.4.14.609 2010.5.23 - Kernel Mode Privilege Escalation / Kingsoft WebShield KAVSafe.sys = 2010.4.14.6092010.5.23 Kernel Mode Local Privilege Escalation Vulnerability VULNERABLE PRODUCTS Kingsoft WebShield = 3.5.1.2 2010.5.23 Signature Date: 2010-5-23 2:33:54 And...
Kingsoft DuBa Browser Shield ActiveX memory corruption
No description provided...
Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC
Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being hacked ? this vuln almost effect in all of the duba security software. Code : object id=TestObj...
Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht t...
Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being...
金山毒霸杀毒软件套装文档解析拒绝服务漏洞
BUGTRAQ ID: 37247 金山毒霸是一种个人电脑安全防护软件，集合了查毒、杀毒、实时监控、垃圾邮件过滤、防网页挂马和隐私数据保护等实用性强的功能于一身。 金山毒霸在处理解析特定类型的畸形文档时存在漏洞，远程攻击者可能利用此漏洞导致毒霸发生崩溃，失去正常的功能，攻击者可能执行进一步的攻击。 Kingsoft Corp Kingsoft Internet Security 9 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Kingsoft Internet Security 9 Denial of Services
Exploit for unknown platform in category dos / poc =============================================== Kingsoft Internet Security 9 Denial of Services =============================================== Title: Kingsoft Internet Security 9 Denial of Services CVE-ID: OSVDB-ID: Author: Francis Provencher...
Kingsoft Internet Security 9 - Denial of Service
Kingsoft Internet Security 9 - Denial of Service Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introductio...
Kingsoft Internet Security 9 - Denial of Service
Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report Timeline 3 Technical details 4 The Cod...
Kingsoft Internet Security 9 Denial of Services
No description provided by source. Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report...
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution
source: https://www.securityfocus.com/bid/35038/info The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability. Remote attackers may exploit this vulnerability to compromise an affected computer. This issue affects WebShiel...
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting Remote Command Execution
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting Remote Command Execution source: https://www.securityfocus.com/bid/35038/info The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability. Remote attackers may exploit this...