56 matches found
CVE-2023-21688
NT OS Kernel Elevation of Privilege Vulnerability...
Microsoft Windows - IOCTL_MOUNTMGR_QUERY_POINTS Kernel Mountmgr Pool Memory Disclosure
Microsoft Windows - IOCTLMOUNTMGRQUERYPOINTS Kernel Mountmgr Pool Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1150&desc=2 We have discovered that the handler of the IOCTLMOUNTMGRQUERYPOINTS IOCTL in mountmgr.sys discloses portions of uninitialized pool...
PowerStrip < = 3.84 (pstrip.sys) Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | EnTech Taiwan - http://www.entechtaiwan.com/ | // // | | // // | Affected...
Hackers release Windows Phone 8 Malware - to be showcased at MalCon
It's be Just hours Windows Phone 8 has been released - and hackers have already dished out a malware prototype for the platform. Windows Phone 8 is the second generation of the Windows Phone mobile operating system. Windows Phone 8 Microsoft's latest in mobile OS technology - comes in as a direct...
CVE-2008-5725
The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...
Cross site request forgery (csrf)
The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...
CVE-2008-5725
The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...
CVE-2008-5725
The CVE affects the NT kernel-mode driver pstrip.sys (versions 5.0.1.1 and earlier) used by EnTech Taiwan PowerStrip (3.84 and earlier). The vulnerability arises from certain IRP parameters in an IOCTL sent to \Device\Powerstrip1, which can overwrite portions of memory and enable local privilege ...
PowerStrip 3.84 - pstrip.sys Local Privilege Escalation
PowerStrip 3.84 - pstrip.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | EnTech Taiwan - http://www.entechtaiwan.com/ | // // | |...
PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation
//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | EnTech Taiwan - http://www.entechtaiwan.com/ | // // | | // // | Affected Software: | // // | PowerStrip = 3.84 ...
PowerStrip < = 3.84 (pstrip.sys) Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ============================================================= PowerStrip = 3.84 pstrip.sys Privilege Escalation Exploit =============================================================...
Design/Logic Flaw
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these...
CVE-2007-2729
CVE-2007-2729 affects Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81 (and likely older Comodo firewall versions). The issue arises from improper testing of equivalence of process identifiers for certain Windows API functions in the NT kernel (version 5.0 and greater). This a...
CVE-2007-2730
Technical details about CVE-2007-2730 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates from official advisories.
CVE-2007-2730
Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified...
MS04-044: Vulnerabilities in Windows Kernel and LSASS (885835)
The remote host is running version of the NT kernel and LSASS which could allow a local user to gain elevated privileged. An attacker who has the ability to execute arbitrary commands on the remote host could exploit these flaws to gain SYSTEM privileges. C Tenable Network Security, Inc...