PT-2018-17573

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the SASKUTIL.SYS driver in SUPERAntiSpyware Professional Trial, which allows privilege escalation to NT AUTHORITYSYSTEM. This is due to the driver not...

PT-2018-17569

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue is related to the driver file SASKUTIL.SYS, which does not validate input values from IOCtl 0x9C40204c. This can allow local users to cause a denial of service, resulti...

PT-2018-17572

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue allows DLL hijacking, which can lead to Escalation of Privileges. This occurs due to a flaw in SUPERAntiSpyware.exe. Recommendations For version 6.0.1254, consider...

PT-2018-17570

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402080, allowing local users to cause a denial of service, potentially...

CVE-2018-6473: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080...

CVE-2018-6476: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating input values from IOCtl 0x9C402114 or 0x9C402124 or 0x9C40207c...

CVE-2018-6475: Untrusted Search Path

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...

CVE-2018-6471: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078...

PT-2018-17568

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402078, allowing local users to cause a denial of service, potentially...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker

Title: Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker Date of Discovery: 2 Feb 2010 Contact Date: 4 Feb.2010 Release Date: 10 Mar 2010 Author: Luka Milkovic Mail: milkovic.luka at gmail.com Software Link: SUPERAntiSpyware - http://www.superantispyware.com/index.html Super Ad...

KLA10315 Multiple vulnerabilities in SUPERAntiSpyware

Multiple serious vulnerabilities have been found in SUPERAntiSpyware. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code and gain privileges. Below is a complete list of vulnerabilities 1. Unsafe buffers, function parameter handling, unsafe pointe...