PonyOS Local Elevation of Privilege Vulnerability (CNVD-2015-04344)

PonyOS is a new Unix-like operating system. PonyOS suffers from an elevation of privilege vulnerability that allows an attacker to exploit the vulnerability to elevate privileges...

IBM PowerVC Local Elevation of Privilege Vulnerability

IBM PowerVC is a suite of virtualization management solutions. A local elevation of privilege vulnerability exists in IBM PowerVC, allowing a local attacker to exploit the vulnerability to elevate privileges...

CA Common Services Variable Handling Local Elevation of Privilege Vulnerability

CA is a leading global provider of IT management software and solutions, with products and technologies that span the full spectrum of IT environments, from mainframes to distributed systems, from virtualization to the cloud. A security vulnerability in CA Common Services' handling of specially...

McAfee ePolicy Orchestrator Deep Command Path Handling Local Elevation of Privilege Vulnerability

McAfee ePolicy Orchestrator is an industry-leading systems security management solution that helps organizations effectively defend against malicious threats and attacks. McAfee ePolicy Orchestrator Deep Command fails to properly handle paths and directories, allowing local attackers to exploit...

Apple Mac OS X IOBluetoothDevice Local Elevation of Privilege Vulnerability

Apple Mac OS X is a BSD-based operating system of a commercial nature. A local elevation of privilege vulnerability exists in Apple Mac OS X IOBluetoothDevice, which could be exploited by a local attacker to execute arbitrary code to elevate privileges...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2015-00360)

Microsoft Windows is a family of operating systems from Microsoft. Microsoft Windows Microsoft Windows Application Compatibility Infrastructure fails to properly check the authorization of caller forgery tokens, allowing attackers to exploit a vulnerability for elevated privileges...

Microsoft Windows 'AhcVerifyAdminContext' Local Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A local elevation of privilege vulnerability exists in Microsoft Windows 'AhcVerifyAdminContext', which can be exploited by a local attacker to execute arbitrary code with elevated privileges...

EMC Replication Manager/AppSync Local Elevation of Privilege Vulnerability

EMC Replication Manager is a solution that manages replication technology and coordinates the entire data replication process through a unified management console. A local elevation of privilege vulnerability exists in EMC Replication Manager/AppSync, which can be exploited by a local attacker to...

[security bulletin] HPSBMU03086 rev.1 - HP Operations Agent running Glance, Local Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04394554 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04394554 Version: 1 HPSBMU03086 rev....

CVE-2014-2780: Undefined Security Weakness

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges by leveraging control over a low-integrity process to execute a crafted application, aka "DirectShow...

Symantec Endpoint Protection Privilege Assumption, Policy Bypass, Local Elevation of Privilege

SUMMARY The Management Console in Symantec Endpoint Protection does not properly validate user authentication, which could potentially allow a user to assume another users identity and privileges on the console. Symantec Endpoint Protection clients do not sufficiently restrict custom policies,...

Microsoft Releases Security Advisory 2914486

Today we released Security Advisory 2914486 regarding a local elevation of privilege EoP issue that affects customers using Microsoft Windows XP and Server 2003. Windows Vista and later are not affected by this local EoP issue. A member of the Microsoft Active Protections Program MAPP found this...

Vulnerability in VMware VMCI.sys Could Allow Local Elevation of Privilege

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting VMware Workstation version 8.0.4 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, VMware...

CVE-2010-1891: Undefined Security Weakness

The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...

Power Rangers <= v4 Build0316 ASTDriver.sys local elevation of privilege vulnerability-vulnerability warning-the black bar safety net

The vulnerability is the I 2 0 1 0 年 4 月 6 evening, by your own IoControl Fuzz tool mining. The vulnerability exists in the Power Rangers ASTDriver. sys this drive, the impact of the super patrol v4 Build0316 and the previous version. Exploit the vulnerability to achieve local elevation of...

Windows内核Win32k.sys驱动TrueType字体解析本地权限提升漏洞（MS10-032）

BUGTRAQ ID: 40570 CVE ID: CVE-2010-1255 Windows是微软发布的非常流行的操作系统。 Windows的Win32k.sys内核驱动向应用程序提供TrueType字体的字型轮廓信息的方式存在缓冲区溢出漏洞，本地用户在登录后查看了特制 TrueType字体所渲染的内容就会导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Serve...

South River Technologies Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...

South River Technologies WebDrive Service privilege escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...

South River Technologies WebDrive Service privilege escalation

Exploit for unknown platform in category local exploits ============================================================== South River Technologies WebDrive Service privilege escalation ============================================================== Title: South River Technologies WebDrive Service...

Adobe Photoshop Elements 8.0 Privilege Escalation

Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The "Adobe Active File Monitor V8" service is installed with an improper securi...