453 matches found
CVE-2018-5410
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.500...
CVE-2018-5410
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.500...
Google Android Out-of-Bounds Access Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which DIAG driver is a logging system driver. An out-of-bounds access vulnerability exists in the DIAG driver in Android. An attacker can exploit this vulnerability to allow...
PT-2018-2877
Name of the Vulnerable Software and Affected Versions Strazh NT affected versions not specified Description The issue is related to a lack of access control to file system objects in the Strazh NT information protection system driver. This could allow a local attacker to gain access to file syste...
PT-2018-11489
Name of the Vulnerable Software and Affected Versions Linux kernel version 4.15.0 Description The issue is related to the ntfs end buffer async read function in the ntfs.ko filesystem driver, which allows attackers to trigger a stack-based out-of-bounds write. This can cause a denial of service,...
Microsoft Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft Windows 7 and others are operating systems released by Microsoft Corporation in the U.S. The Windows Common Log File System CLFS driver is one of the common log file system drivers. The Microsoft Windows CLFS driver suffers from a privileged access vulnerability that stems from the...
CVE-2018-10977
In 2345 Security Guard 3.7, the driver file 2345BdPcSafe.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x002220E4...
KLA11241 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...
Advanced SystemCare Ultimate Denial of Service Vulnerability
Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...
CVE-2018-0846
The Windows Common Log File System CLFS driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability...
February 13, 2018—KB4074587 (Security-only update)
None None...
February 13, 2018—KB4074589 (Security-only update)
None None...
KLA11200 Multiple vulnerabilties in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...
WatchDog Anti-Malware Denial of Service Vulnerability
WatchDog Anti-Malware is a cloud-based, multi-engine malware scanner from WatchDogDevelopment, USA. A security vulnerability exists in the ZAMGUARD32.SYS driver file in WatchDog Anti-Malware version 2.74.186.150, which originates when the program fails to properly validate the input value of IOCt...
Iolo System Shield AntiVirus and AntiSpyware Elevation of Privilege Vulnerability
Iolo System Shield AntiVirus and AntiSpyware is an antivirus program with anti-spyware features from Iolo Technolgies, USA. A security vulnerability exists in the amp.sys driver file in Iolo System Shield AntiVirus and AntiSpyware version 5.0.0.136, which originates from the program's failure to...
nProtect AVS Denial of Service Vulnerability (CNVD-2018-02848)
nProtect AVS is security software for blocking malware, spyware, ransomware, and other cyber threats. A denial of service vulnerability exists in the driver file TKFsAv.SYS in nProtect AVS V4.0 4.0.0.38. The vulnerability arises due to an unvalidated input value from IOCtl 0x220c20. A local user...
CVE-2018-6203
In eScan Antivirus 14.0.1400.2029, the driver file econceal.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C...
Malwarebytes Premium Denial of Service Vulnerability (CNVD-2018-02565)
Malwarebytes Premium is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. A security vulnerability exists in the FARFLT.SYS driver file ...
IKARUS Anti-Virus Denial of Service Vulnerability
IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000084. A local user can exploit this vulnerability to cause ...