VirIT eXplorer 6.7.43 - tg-scan.dll DLL Loading Arbitrary Code Execution

VirIT eXplorer 6.7.43 - tg-scan.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43506/info VirIT eXplorer is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the...

VirIT eXplorer 6.7.43 - 'tg-scan.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43506/info VirIT eXplorer is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to scan a file from a network share location that...

Fake Conficker Alert Drops Scareware Threat

An ongoing spam campaign is once again attempting to impersonate Microsoft’s security team by mass mailing Conficker.B Infection Alerts that drop a sample of the Antivirus Pro 2010 scareware scam. Here’s a sample of what the text looks like: “Dear Microsoft Customer, Starting 18/10/2009 the...

Update Protection against Recent Malware Threats (5-Jul-09)

The update includes new protections against 11 recent malware threats: Trickler: Trojan.Swizzor-D - Trojan.Swizzor-D is a downloader Trojan that downloads malicious files form remote hosts onto the infected machines. It also communicates with remote servers and transfers unwanted advertisement...

Update Protections against Recent Malware Threats (30-Mar-09)

The update includes new protections against 2 recent malware threats:Backdoor Trojan: Zlob - Zlob is backdoor Trojan that can be installed via malware downloader or exploits. It installs other applications that continuously connect to remote servers and downloads malicious scripts and...

Trend Micro产品UUE畸形ZIP文件缓冲区溢出漏洞

BUGTRAQ ID: 26818 CNCAN ID:CNCAN-2007121208 Trend Micro Antivirus plus AntiSpyware是一款反恶意软件应用程序。 Trend Micro Antivirus plus AntiSpyware处理.uue文件存在格式串错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当解析.uue文件时Trend Micro Antivirus plus AntiSpyware等多个产品不正确检查部分字段值，导致远程内存破坏，当.uue文件的部分字段包含格式串字符时，可导致"Trend Micro Central...

CVE-2007-3873

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...

Stack overflow

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...

CVE-2007-3873

CVE-2007-3873 describes a stack-based buffer overflow in Trend Micro’s vstlib32.dll (1.2.0.1012) used by the SSAPI Engine in AntiSpyware 3.5 and PC-Cillin Internet Security 2007 (15.0–15.3), triggered when a long local file path is processed via a ReadDirectoryChangesW callback. Affects SSAPI Eng...

Trend Micro ServerProtect Detection

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

Webroot SpySweeper Enterprise Detection

This plugin checks that the remote host has Webroot Spy Sweeper Enterprise installed and properly running, and makes sure that the latest Vdefs are loaded. C Tenable Network Security, Inc. This script has been rewritten by Montgomery County Original script was written by Jeff Adams and Tenable...

Microsoft Windows - Path Conversion

Microsoft Windows - Path Conversion source: https://www.securityfocus.com/bid/17934/info Microsoft Windows is susceptible to a path-conversion weakness that may allow attackers to bypass security applications. This issue occurs because the operating system uses multiple differing algorithms to...

Microsoft Windows - Path Conversion

source: https://www.securityfocus.com/bid/17934/info Microsoft Windows is susceptible to a path-conversion weakness that may allow attackers to bypass security applications. This issue occurs because the operating system uses multiple differing algorithms to resolve file paths. Attackers may...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Affected by the anti - virusengine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus Personal Pro 4.5.0.104 Kaspersky Antivirus For MS NTServer 4.5.0.1...

CVE-2005-2940

CVE-2005-2940 describes an unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1). Local users could gain privileges by placing a malicious file named program.exe in the C: drive, which could be executed by one of several Antispyware components: GIANTAntiSpywareMain....

CVE-2005-2940

Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 Beta 1 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs 1 GIANTAntiSpywareMain.exe, 2 gcASNotice.exe, 3 gcasServ.exe, 4 gcasSWUpdater.exe, or 5...

CVE-2005-2940

Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 Beta 1 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs 1 GIANTAntiSpywareMain.exe, 2 gcASNotice.exe, 3 gcasServ.exe, 4 gcasSWUpdater.exe, or 5...

CVE-2005-2935

Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps CVE-2005-2940...

CVE-2005-2935

Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps CVE-2005-2940...

CVE-2005-2935

The CVE-2005-2935 entry covers an Unquoted Windows search path vulnerability in Microsoft AntiSpyware (AntispywareMain.exe) that could allow local code execution by placing a malicious c:\program.exe. The issue stems from an unquoted search path when AntiSpyware attempts to execute gsasDtServ.exe...