Null pointer dereference

The SysInspector AntiStealth driver esiasdrv.sys 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHODNEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer...

CVE-2008-4451

The SysInspector AntiStealth driver esiasdrv.sys 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHODNEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer...

CVE-2008-4451

The CVE-2008-4451 entry concerns the SysInspector AntiStealth driver (esiasdrv.sys) version 3.0.65535.0 used by ESET System Analyzer Tool 1.1.1.0. The vulnerability allows local attackers to execute arbitrary code via a specific METHOD_NEITHER IOCTL to \Device\esiasdrv that overwrites a pointer. ...

ESET SysInspector - 1.1.1.0 (esiadrv.sys) Proof of Concept Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | //...

eset-poc.txt

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | // // | ESET System Analyzer Tool -...

ESET SysInspector 1.1.1.0 - 'esiadrv.sys' (PoC)

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | // // | ESET System Analyzer Tool -...

ESET SysInspector 1.1.1.0 - esiadrv.sys (PoC)

ESET SysInspector 1.1.1.0 - esiadrv.sys PoC //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected...

ESET SysInspector - 1.1.1.0 (esiadrv.sys) Proof of Concept Exploit

Exploit for unknown platform in category dos / poc ================================================================== ESET SysInspector - 1.1.1.0 esiadrv.sys Proof of Concept Exploit ==================================================================...

ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability

The host is running ESET Smart Security, which is prone to a local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodesetsmartseclocalprvescvuln900114.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability...

ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability

ESET Smart Security is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ESET Smart Security 'easdrv.sys'local privilege elevation vulnerability-vulnerability warning-the black bar safety net

:::Determination Xiao network research positions::: Eset Software Smart Security 3.0.667 Description: BUGTRAQ ID: 3 0 7 1 9 CNCAN ID: CNCAN-2 0 0 8 0 8 1 9 0 3 ESET Smart Security is an integrated firewall, anti-virus software. ESET Smart Security 'easdrv.sys'drive there is an input checking issu...

ESET Smart Security 'easdrv.sys'本地特权提升漏洞

BUGTRAQ ID: 30719 CNCAN ID：CNCAN-2008081903 ESET Smart Security是一款集成防火墙，反病毒的应用软件。 ESET Smart Security 'easdrv.sys'驱动存在输入检查问题，本地攻击者可以利用漏洞以内核进程权限执行任意指令。 文件：easdrv.sys .text:00012B92 loc12B92: .text:00012B92 push ebp+InputBuf .text:00012B95 call ds:off1A200eax .text:00012B9B mov ecx, ebp+OutputBuffe...

eset-escalate.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92 loc12B92: .text:00012B92 push ebp+InputBuf .text:00012B95 call...

ESET Smart Security 3.0.667.0 Privilege Escalation PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92 loc12B92: .text:00012B92 pu...

ESET Smart Security 3.0.667.0 Privilege Escalation PoC

Exploit for unknown platform in category dos / poc ====================================================== ESET Smart Security 3.0.667.0 Privilege Escalation PoC ====================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ES...

ESET Smart Security 3.0.667.0 - Privilege Escalation (PoC)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92 loc12B92: .text:00012B92 push ebp+InputBuf .text:00012B95 call...

ESET Smart Security 3.0.667.0 - Privilege Escalation (PoC)

ESET Smart Security 3.0.667.0 - Privilege Escalation PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92...

Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

Race condition

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

Integer overflow

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...