172 matches found
CVE-2017-8776
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the...
Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...
Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...
UBUNTU-CVE-2017-5400
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...
Mozilla: Excessive JIT code allocation allows bypass of ASLR and DEP (MFSA 2017-02)
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
Mozilla Firefox ESR < 45.7 Multiple Vulnerabilities
Binary data 9928.prm...
UBUNTU-CVE-2017-5375
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
Updated kernel-4.4.32 packages fixes security vulnerabilities
This update is based on upstream 4.4.32 and fixes at least the following security issues: The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorrect buffer size for certain timeout data,...
The vulnerability of Microsoft Silverlight software allows a malicious intruder to compromise protected information.
The vulnerability exists in the security features of Silverlight due to the improper implementation of Data Execution Prevention DEP and Address Space Layout Randomization ASLR. This allows attackers to circumvent these security mechanisms by exploiting the vulnerability, enabling them to execute...
New Angler Exploits Bypass EMET Mitigations
New Microsoft Silverlight and Adobe Flash exploits that bypass Microsoft’s Enhanced Mitigation Experience Toolkit EMET have found their way into an updated version of the Angler Exploit Kit. EMET is a suite of freely available tools for Windows machines that mitigate memory-based attacks. The...
Microsoft Enhanced Mitigation Experience Toolkit Security Bypass Vulnerability
Microsoft Enhanced Mitigation Experience Toolkit is a security tool introduced in response to vulnerabilities. It protects users from attacks even when patches are not installed through technologies such as Data Execution Protection DEP, Structured Exception Handling Override Protection SEHOP, an...
Awesome Windows Exploitation Resources
A curated list of awesome Windows Exploitation resources. Windows stack overflows Stack Base Overflow Articles. Win32 Buffer Overflows Location, Exploitation and Prevention – by Dark spyrit 1999 Writing Stack Based Overflows on Windows – by Nish Bhalla’s 2005 Windows heap overflows Heap Base...
The vulnerability of the antivirus software AVG InternetSecurity allows a hacker to bypass the DEP and ASLR protection mechanisms.
The vulnerability of the AVG InternetSecurity antivirus software relates to the possibility of memory access with read, write, and execute permissions. Exploiting this vulnerability can allow a malicious actor to bypass the User Process DEP and ASLR protection mechanisms...
The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass both DEP and ASLR protection mechanisms.
The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the allocation of memory with read, write, and execute permissions at certain addresses on a 32-bit platform, during the protection of external applications. Exploiting this vulnerability could allow an attacker...
McAfee VirusScan Enterprise Buffer Overflow Protection Security Bypass Vulnerability
McAfee VirusScan Enterprise is a suite of antivirus software that provides a full range of security, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability in the McAfee VirusScan Enterprise Buffer Overflow Protection BOP feature allocates memory with...
AVG Internet Security Security Bypass Vulnerability
AVG Internet Security is a suite of Internet security software from the Czech company AVG. The AVG Internet Security 2015 program protects user-mode processes by allocating memory with Read, Write, Execute RWX privileges in predictable addresses, allowing an attacker to bypass the DEP and ASLR...
Kaspersky Total Security Security Bypass Vulnerability
Kaspersky Total Security is a comprehensive multi-device version of the Russian antivirus program. The Kaspersky Total Security program protects user-mode processes by allocating memory with Read, Write, Execute RWX privileges in predictable addresses, allowing an attacker to exploit this...
Buffer overflow
Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data...
on windows systems use the VS compiler to buffer overflow preventive measures-vulnerability warning-the black bar safety net
0x01 /GS --buffer security check If you use the/GS compile the program to insert code to detect possible overwrite the function return address of buffer overflows. If the occurrence of a buffer overflow, the system will display to the user a warning dialog, and then terminate the program. Thus, t...
Return-into-libc attack and Defense-bug warning-the black bar safety net
This article first analyzes the return-into-libc attack principle, were introduced in different platforms for the traditional return-into-libc attack of the experimental process and results. Then, this paper further introduces and explains the return-oriented programming attacks, this attack can...