CVE-2008-5724: Undefined Security Weakness

The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...

ESET Smart Security epfw.sys驱动本地内核权限提升漏洞

BUGTRAQ ID: 32917 ESET Smart Security是一个集成的安全套装解决方案,适合普通个人消费者和中小型商业客户。 ESET Smart Security的epfw.sys设备驱动没有正确地验证传送给IOCTL处理器函数的地址，本地攻击者可以通过向IOCTL处理器函数提供特制的Irp用常数双字值覆盖用户提供的地址，导致以内核权限执行任意指令。 ... .text:000118DE @@ioctl0x8897229F: .text:000118DE push 4 .text:000118E0 pop eax .text:000118E1 cmp...

ESET Smart Security <= 3.0.672 (epfw.sys) Privilege Escalation Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | //...

ESET Smart Security <= 3.0.672 (epfw.sys) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ====================================================================== ESET Smart Security = 3.0.672 epfw.sys Privilege Escalation Exploit ======================================================================...

ESET Smart Security 3.0.672 - epfw.sys Local Privilege Escalation

ESET Smart Security 3.0.672 - epfw.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | ...

ESET Smart Security 3.0.672 - 'epfw.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | // // | ESET Smart Security = 3.0.672...

CVE-2008-5527

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5534

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

Design/Logic Flaw

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

Design/Logic Flaw

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5527

CVE-2008-5527 describes a malware-detection bypass in HTML documents when viewed with Internet Explorer 6/7, by prepending an MZ header (EXE info) and altering the filename to have no extension, .txt, or .jpg. The vulnerability is demonstrated via CVE-2006-5745 exploits. The connected records ind...

CVE-2008-5534

CVE-2008-5534 is a vulnerability in certain antivirus products (e.g., ESET NOD32 3662/3440) where an HTML document can bypass malware detection when opened in IE6/IE7 by prefixing the file with an MZ header (EXE info) and altering the filename to have no extension or a .txt or .jpg extension, as ...

CVE-2008-5527

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5534

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5534: Improper Input Validation

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5527: Improper Input Validation

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5425

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

Design/Logic Flaw

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5425

CVE-2008-5425 and related entries describe a DoS risk from processing large or multipart email messages. Affected products across connected records include ESet NOD32 2.70.0039.0000; Mozilla Thunderbird 2.0.14; Microsoft Outlook Express 6.00.2900.5512; Norton Antivirus in Norton Internet Security...

CVE-2008-5425

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...