[Full-disclosure] Comodo Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, We would like to inform you about a vulnerability in Comodo Firewall Pro. Description: Comodo Firewall Pro former Comodo Personal Firewall hooks many functions in SSDT and in at least seven cases it fails to validate arguments that come from the user mode. User calls to NtConnectPort CFP...

Breakthrough IceSword process itself protection method-vulnerability warning-the black bar safety net

IceSword drive on its own process to do the protection, so that the malicious program is terminated not him. IceSword did not use HOOK the SSDT method, but is also useless what is too perverted method, but the Inline Hook the NtOpenProcess And NtTerminateProcess several functions, namely to modif...

Breakthrough IceSword own process protection-vulnerability warning-the black bar safety net

IceSword drive on its own process to do the protection, so that the malicious program is terminated not him. IceSword did not use HOOK the SSDT method, but is also useless what too BT method, but the Inline Hook the NtOpenProcess And NtTerminateProcess several functions, namely to modify the...

CVE-2006-3074

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus KAV 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the 1 NtCreateKey, 2 NtCreateProcess, 3 NtCreateProcessEx, 4 NtCreateSection, 5...

CVE-2006-3074

KVE-2006-3074 affects Kaspersky Internet Security 6.0/7.0 and KAV 6.0/7.0 (Windows Workstations/Servers). The vulnerability arises from insufficient validation of parameters to hooked system calls (NtCreateKey, NtCreateProcess, NtCreateProcessEx, NtCreateSection, NtCreateSymbolicLinkObject, NtCre...

CVE-2006-3074: Improper Restriction of Operations within the Bounds of a Memory Buffer

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus KAV 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the 1 NtCreateKey, 2 NtCreateProcess, 3 NtCreateProcessEx, 4 NtCreateSection, 5...