107 matches found
CVE-2022-41604
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...
CVE-2024-5803
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use TOCTOU when self protection is disabled...
CVE-2024-5803 Local privelage escalation via COM hijacking
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use TOCTOU when self protection is disabled...
CVE-2024-5803 Local privelage escalation via COM hijacking
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use TOCTOU when self protection is disabled...
CVE-2024-5803
Affecting software: AVG/Avast Antivirus (AVGUI.exe). Vulnerability: Local privilege escalation via a COM hijack under a TOCTOU race condition when self-protection is disabled. Versions affected: before 24.1. Impact: An attacker able to exploit this locally to gain higher privileges. Root cause: C...
Avast Antivirus 安全漏洞
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24.1, which stems from a vulnerability that could allow a local attacker to elevate privileges via COM hijacking during the time of check to time of...
PT-2024-37167 · Avast · Avg/Avast Antivirus
Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to 24.1 Description: The issue allows a local attacker to escalate privileges via a COM hijack in a time-of-check to time-of-use TOCTOU scenario when self-protection is disabled. This occurs in the AVGUI.exe...
The Battle Against Business Logic Attacks: Why Traditional Security Tools Fall Short
As the digital landscape continues to evolve, so do the tactics utilized by bad actors that are seeking to exploit application vulnerabilities. Among the most insidious types of attacks are business logic attacks BLAs. Unlike known attacks, which can be identified by signatures or patterns, such ...
Check Point ZoneAlarm Extreme Security Elevation of Privilege Vulnerability
ZoneAlarm Extreme Security is a personal firewall software from Check Point Israel. An elevation of privilege vulnerability exists in versions prior to Check Point ZoneAlarm Extreme Security 15.8.211.19229, which stems from weak permissions on directories and a self-protecting driver bypass that...
Authentication flaw
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...
CVE-2022-41604
CVE-2022-41604 affects Check Point ZoneAlarm Extreme Security prior to 15.8.211.19229. Root cause: weak permissions on %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates and a self-protection driver bypass that allows creation of a junction directory, enabling an arbitrary file move as NT AUTHORITY\...
CVE-2022-41604
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...
How We’re Protecting Customers & Staying Ahead of CVE-2021-44228
CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...
Integrate Serverless Security for Runtime Apps
Serverless solutions are prone to a high degree of application attacks. Learn how to build runtime application self-protection with vulnerability visibility and mitigation capabilities for your serverless applications...
Introduction to Runtime Application Self-Protection (RASP)
Discover how runtime application self-protection RASP is shifting the narrative of application security and how to easily integrate RASP into your software for improved speed and delivery...
Logging: A Deep Dive
Our RASP product At Imperva our team builds a product called RASP which stands for Runtime Application Self Protection. As indicated by the name, it is a security product which plugs directly into the runtime of an application in order to provide a similar and complementary set of capabilities as...
5 Ways Your Software Supply Chain is Out to Get You, Part 3: Exploit Open Source Libraries
In previous posts, we explained how two kinds of supply chain attack methods, Vendor Compromise and Exploit Third Party Applications, are threatening software supply chains, transferring an extraordinary amount of risk downstream to the organizations and users that trust and depend on them. In th...
5 Ways Your Software Supply Chain is Out to Get You, Part 2: Exploit Third Party Applications
In Part 1 of this series, we explained how and why our software supply chain transfers an extraordinary amount of risk downstream to the organizations and users that trust and depend on it. We also presented evidence suggesting that 2021 may well be the year of the Software Supply Chain attack...
How to protect serverless and container applications with RASP
With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...
Software Supply Chain Attacks: From Formjacking to Third Party Code Changes
2020 wasn’t the first year in which software supply chain attacks caused major damage, but it certainly brought them to the general public. Much has been said about the headline-grabbing nation state examples, but there is a wide spectrum of these attacks and some are commoditized. Protecting...