CVE-2010-3576

CVE-2010-3576 is a local vulnerability affecting Oracle Solaris 8, 9, 10 and OpenSolaris in the SCSI enclosure services device driver. The issue can affect integrity and availability (partial impact) but requires local access (no remote exploitation). The CVSS 2.0 base score is 3.6 (LOW) with low...

Microsoft Windows Kernel "GetDCEx()" Memory Corruption Vulnerability

No description provided by source. "Microsoft Windows is the operating system developed by Microsoft. As of May 2010, Windows was the most widely used system, with more than 90% of the worldwide usage share of operating systems according to Net Application." II. DESCRIPTION ---------------------...

Design/Logic Flaw

Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the 1 HookCont.sys, 2 HookNtos.sys, 3 HOOKREG.sys, or 4 HookSys.sys device driver; or...

Code injection

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1591

Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the 1 HookCont.sys, 2 HookNtos.sys, 3 HOOKREG.sys, or 4 HookSys.sys device driver; or...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1592

CVE-2010-1592 affects the Sandra Device Driver (sandra.sys) in SiSoftware Sandra, up to version 15.18.1.1 and earlier. The vulnerability is described as allowing local users to gain privileges or cause a denial of service (system crash) via unspecified vectors involving Model-Specific Registers. ...

CVE-2010-1591

Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the 1 HookCont.sys, 2 HookNtos.sys, 3 HOOKREG.sys, or 4 HookSys.sys device driver; or...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving “Model-Specific Registers.” Recent assessments: Assessed Attacker Value: 0...

Microsoft Windows Win32k EOT Parsing Integer Overflow (MS09-065; CVE-2009-2514)

Microsoft Windows kernel, the core of the operating system, contains a device driver win32k.sys. This device driver is an important component that controls window displays, receives keyboard and device input, offers functions for graphic output devices, and provides many other valuable services...

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation

/ Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Securit...

CentOS 5 : kernel (CESA-2008:0957)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...

Linux Kernel 2.6.26 - Auerswald USB Device Driver Buffer Overflow (PoC)

Linux Kernel 2.6.26 - Auerswald USB Device Driver Buffer Overflow PoC source: https://www.securityfocus.com/bid/48687/info The Auerswald USB Device Driver for the Linux kernel is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data...

Solaris Update for Sun iSCSI Device Driver and Utilities 119091-35

Check for the Version of Sun iSCSI Device Driver and Utilities OpenVAS Vulnerability Test Solaris Update for Sun iSCSI Device Driver and Utilities 119091-35 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Solaris Update for Sun iSCSI Device Driver and Utilities 119090-33

Check for the Version of Sun iSCSI Device Driver and Utilities OpenVAS Vulnerability Test Solaris Update for Sun iSCSI Device Driver and Utilities 119090-33 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Solaris Update for Sun iSCSI Device Driver and Utilities 119091-35

Check for the Version of Sun iSCSI Device Driver and Utilities OpenVAS Vulnerability Test Solaris Update for Sun iSCSI Device Driver and Utilities 119091-35 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Solaris 10 (x86) : 119091-35

SunOS 5.10x86: Sun iSCSI Device Driver an. Date this patch was last updated by Sun : Sep/16/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Sun Solaris Cassini Gigabit-Ethernet设备驱动远程拒绝服务漏洞

Bugraq ID: 35439 Sun Solaris是一款商业性质的操作系统。 Solaris Cassini Gigabit-Ethernet设备驱动和Jumbo帧处理Solaris TCP/IP网络栈存在安全问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv82 Sun OpenSolaris build snv80 Sun OpenSolaris build snv78 Sun OpenSolaris build snv77 S...

CVE-2009-2137

The CVE-2009-2137 issue is a memory leak in the Ultra-SPARC T2 crypto provider device driver (n2cp) on Sun Solaris 10 and OpenSolaris (snv_54–snv_112). The vulnerability allows context-dependent attackers to cause a denial of service through memory consumption triggered by very large keylen value...

Design/Logic Flaw

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions;...