CVE-2008-5724

CVE-2008-5724 affects the Personal Firewall driver (epfw.sys) in ESET Smart Security up to version 3.0.672, and the Personal Firewall component itself up to 3.0.672.0. The flaw allows local users to escalate privileges by sending a crafted IRP through a METHOD_NEITHER IOCTL to \Device\Epfw, which...

ESET Smart Security epfw.sys驱动本地内核权限提升漏洞

BUGTRAQ ID: 32917 ESET Smart Security是一个集成的安全套装解决方案,适合普通个人消费者和中小型商业客户。 ESET Smart Security的epfw.sys设备驱动没有正确地验证传送给IOCTL处理器函数的地址，本地攻击者可以通过向IOCTL处理器函数提供特制的Irp用常数双字值覆盖用户提供的地址，导致以内核权限执行任意指令。 ... .text:000118DE @@ioctl0x8897229F: .text:000118DE push 4 .text:000118E0 pop eax .text:000118E1 cmp...

ESET Smart Security <= 3.0.672 (epfw.sys) Privilege Escalation Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | //...

ESET Smart Security 3.0.672 - epfw.sys Local Privilege Escalation

ESET Smart Security 3.0.672 - epfw.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | ...

ESET Smart Security 3.0.672 - 'epfw.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | // // | ESET Smart Security = 3.0.672...

ESET Smart Security <= 3.0.672 (epfw.sys) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ====================================================================== ESET Smart Security = 3.0.672 epfw.sys Privilege Escalation Exploit ======================================================================...

CVE-2008-5534

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5527

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

Design/Logic Flaw

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

Design/Logic Flaw

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5527

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5534

CVE-2008-5534 is a vulnerability in certain antivirus products (e.g., ESET NOD32 3662/3440) where an HTML document can bypass malware detection when opened in IE6/IE7 by prefixing the file with an MZ header (EXE info) and altering the filename to have no extension or a .txt or .jpg extension, as ...

CVE-2008-5534

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5527

CVE-2008-5527 describes a malware-detection bypass in HTML documents when viewed with Internet Explorer 6/7, by prepending an MZ header (EXE info) and altering the filename to have no extension, .txt, or .jpg. The vulnerability is demonstrated via CVE-2006-5745 exploits. The connected records ind...

CVE-2008-5425

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

Design/Logic Flaw

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5425

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5425

CVE-2008-5425 and related entries describe a DoS risk from processing large or multipart email messages. Affected products across connected records include ESet NOD32 2.70.0039.0000; Mozilla Thunderbird 2.0.14; Microsoft Outlook Express 6.00.2900.5512; Norton Antivirus in Norton Internet Security...

ESET SysInspector 'esiadrv.sys'本地特权提升漏洞

BUGTRAQ ID:31521 CNCAN ID：CNCAN-2008100303 ESET SysInspector是一款类似于Hijackthis的分析工具。 ESET SysInspector处理IOCTL请求存在问题，本地攻击者可以利用漏洞以内核特权执行任意代码。 esiadrv.sys 3.0.65535.0设备驱动IOCTL处理代码存在问题，由于不正确验证用户提供传递给IOCTLs的地址。所有IOCTLs以METHODNEITHER方式生成。由于设备驱动由GUI动态装载和卸载。 Eset SysInspector 1.1.1 目前没有解决方案提供：...

CVE-2008-4451

The SysInspector AntiStealth driver esiasdrv.sys 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHODNEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer...