Watchdog Development Anti-Malware/Online Security Pro Denial of Service Vulnerability

WatchDog Anti-Malware and Online Security Pro are both cloud-based, multi-engine malware scanners from WatchDogDevelopment, USA. zam32.sys driver is one of the zam32 system drivers. A security vulnerability exists in the zam32.sys driver in Watchdog Anti-Malware version 2.74.186.150 and Online...

WatchDog Anti-Malware and Online Security Pro zam32.sys Driver Denial of Service Vulnerability

WatchDog Anti-Malware and Online Security Pro are both cloud-based, multi-engine malware scanners from WatchDog Development in the U.S. zam32.sys driver is one of the zam32 system drivers. A denial of service vulnerability exists in the zam32.sys driver in Watchdog Anti-Malware version 2.74.186.1...

CVE-2017-15921

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15920

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...

Null pointer dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15921

CVE-2017-15921 affects Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150. The zam32.sys driver contains a NULL pointer dereference that is triggered when sending an operation to ioctl 0x80002010, due to input buffers being NULL or input buffer size 0 not being validated. Pub...

CVE-2017-15920

In Watchdog Development Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver has a NULL pointer dereference when handling IOCTL 0x80002054 due to an input buffer being NULL or size 0. This is a hardware/driver-level issue within zam32.sys and is documented...

CVE-2017-15921

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15921: NULL Pointer Dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15920: NULL Pointer Dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...

Watchdog Development Anti-Malware / Online Security Pro - NULL Pointer Dereference

/ Exploit Title - Watchdog Development Anti-Malware/Online Security Pro Null Pointer Dereference Date - 26th October 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.watchdogdevelopment.com/ Tested Version - 2.74.186.150 Driver Version - 2.21.63 - zam32.sys Tested on OS ...

Watchdog Development Anti-Malware Online Security Pro - NULL Pointer Dereference

Watchdog Development Anti-Malware Online Security Pro - NULL Pointer Dereference / Exploit Title - Watchdog Development Anti-Malware/Online Security Pro Null Pointer Dereference Date - 26th October 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.watchdogdevelopment.com/...

CVE-2010-5179

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

PT-2012-1391 · Trend Micro · Trend Micro Internet Security Pro

Name of the Vulnerable Software and Affected Versions: Trend Micro Internet Security Pro 2010 version 17.50.1647.0000 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

CVE-2010-5179: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

Trend Micro Internet Security Pro UfProxyBrowserCtrl ActiveX extSetOwner Function Arbitrary Code Execution

The UfProxyBrowserCtrl ActiveX control, a component of Trend Micro Internet Security Pro 2010 installed on the remote Windows host, reportedly has an issue in its 'extSetOwner' function that allows a remote attacker to run arbitrary code via an invalid address that is dereferenced as a pointer. I...

Trend Micro Internet Security Pro 2010 - ActiveX extSetOwner Remote Code Execution

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution. CVE-2010-3189. Remote exploit for windows platform $Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

Trend Micro Internet Security Pro ActiveX extSetOwner() Code Execution

Exploit for windows platform in category remote exploits ====================================================================== Trend Micro Internet Security Pro ActiveX extSetOwner Code Execution ====================================================================== trendmicroextsetowner.rb Tren...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

trendmicroextsetowner.rb Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Trend Micro Internet Security Pro 2010 on Internet Explorer 7, Windows XP SP3 - Trend Micro...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...