G DATA产品GDTdiIcpt.sys驱动内存破坏漏洞

BUGTRAQ ID: 31246 G DATA是德国的一家杀毒软件厂商。 G DATA产品所使用的GDTdiIcpt.sys内核驱动在处理IOCTL请求时存在错误，本地攻击者可以利用这个漏洞导致拒绝服务或执行任意内核级代码。 GDTdiIcpt.sys驱动未经验证便接受了用户提供的IOCTL 0x8317001c调用，这样就可以用任意值填充不同的内核寄存器。之后这些寄存器值被用作了内核函数的参数，因此特制参数可能完全控制Windows内核的执行流。 以下是GDTdiIcpt.sys的反汇编（Windows Vista 32位版）： ... .text:00012510 cmp...

Buffer overflow

Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...

CVE-2007-5436

Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...

CVE-2007-5436

The CVE-2007-5436 entry concerns G DATA Antivirus 2007. A buffer overflow in the ActiveX control ScanObjectBrowser.DLL, specifically in the SelectPath function, could allow remote code execution via unspecified parameters. The issue is described as not crossing privilege boundaries in many enviro...

CVE-2007-5436

Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...

G Data antivirus buffer overflow

ScanObjectBrowser.DLL SelectPath function buffer overflow...

[ELEYTT] 10PAZDZIERNIK2007

Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Tomasz Polis, www.eleytt.com Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Vulnerability Table =================== 1. CA Erwin Datatype Standards File...

CVE-2007-5041

G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey and 2 NtOpenProcess kernel SSDT hooks...

Design/Logic Flaw

G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey and 2 NtOpenProcess kernel SSDT hooks...

CVE-2007-5041

G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey and 2 NtOpenProcess kernel SSDT hooks...

CVE-2007-5041

CVE-2007-5041 : G DATA InternetSecurity 2007 reportedly does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, enabling local users to trigger a crash (DoS) and potentially gain privileges via the (1) NtCreateKey and (2) NtOpenProcess kernel SSD...