698 matches found
CVE-2010-5160
Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...
CVE-2010-5160
The CVE-2010-5160 entry concerns ESET Smart Security 4.2.35.3 on Windows XP . It describes a race condition that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution, r...
PT-2012-1372 · Eset · Eset Smart Security
Name of the Vulnerable Software and Affected Versions: ESET Smart Security version 4.2.35.3 Description: A race condition in ESET Smart Security on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not...
CVE-2010-5160: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...
The Infections That Will Not Die: Conficker and AutoRun
One of the wonderful things about some pieces of malware is that, like that slightly dodgy uncle who never seems to have a job, they never really go away. They just sort of hang about in the background, waiting for the right time to hit you up for some spare cash or CPU cycles. It appears that th...
Онлайн семинары, источники.
В этой теме собираем информацию о ресурсах проводящих онлайн конференции по нашей тематике. На данный момент это: Вебинары: от Positive Technologies от Neuron hackspace Презентации: Так же можно послушать радио от Eset:...
ESET NOD32 releases Antivirus for Linux 4 !
ESET NOD32 releases Antivirus for Linux 4 ! ESET announced the availability of ESET NOD32 Antivirus 4 Business Edition for Linux Desktop and ESET NOD32 Antivirus 4 for Linux. ESET NOD32 Antivirus 4 for Linux offers protection against cross-platform and emerging threats, enhancing the security of...
NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow (CVE-2005-2903)
The Eset NOD32 anti-virus AV product line has the ability to decompress files in numerous archive formats for virus scanning. One such supported archive format is the ARJ format. A buffer overflow vulnerability has been reported in Eset's NOD32 Anti-Virus products. The flaw is triggered when...
ESET Nod32 Romania Hacked !
Today guy from InSecurity.Ro named sway1990 found again a critical vulnerability MySQL Injection in their website. Some extracted informations: Version – 5.1.41-3ubuntu12.10 Main DB – c1eset HostName – web.axelsoft.ro User – c1eset@localhost DataBases: informationschema c1eset Tables of main db:...
Report : Attacks on social media to rise in 2011 !
ESET, a security solution provider for viruses and malicious software, has released its cyber-threat report for 2011, predicting that attacks on Facebook and other social networks will increase over the coming year. The report prepared by specialists and searchers in the business also says the...
Athena-gs.fr Cross Site Scripting
+-----------------------------------------------------------+ | Stupid XSS + "Auth ByPass" athena-gs.fr | +-----------------------------------------------------------+ | Author : FlUxIuS from Slashon and HandGrep | | Date : 14/06/2010 | +-----------------------------------------------------------...
ESET Smart Security / NOD32 Antivirus LZH Processing Denial of Service
No description provided by source. Oleksiuk Dmitry has discovered a vulnerability in ESET Smart Security and ESET NOD32 Antivirus, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error when processing LZH archives. This can be...
ESET Smart Security 4.2 / NOD32 Antivirus 4.2 (x32-x64) LZH parsing PoC
Exploit for windows platform in category dos / poc ======================================================================= ESET Smart Security 4.2 / NOD32 Antivirus 4.2 x32-x64 LZH parsing PoC ======================================================================= ESET Smart Security 4.2 and NOD3...
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86x64) - LZH archive parsing (PoC)
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 x86x64 - LZH archive parsing PoC ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log f...
ESET Smart Security / Nod32 memory corruption
Memory corruption on LZH archives scanning...
ESET Smart Security LZH archive parsing vulnerability
Software: ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 Vendor status: notified/ignored Tested on: Windows XP, Vista, 7 x32 and x64 Description: Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. PoC...
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86/x64) - LZH archive parsing (PoC)
ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. USAGE: python esetlzh.py TEST.LZH will be created c 2010 eSage Lab...
Mozilla Admits Malware Sneaked into Firefox Add-ons
Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...
ESET Cross Site Scripting
\ // /\ /\ / | \ \ | | | | / \ | \ | | http://www.eset.com/ | / / // / || / / / Cross Site Scripting Exploit Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Vulnerability: Cross Site Scripting ————————- 1. INFORMATION | ————————- Site:...
Design/Logic Flaw
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...