9 matches found
Frida-Wshook - Script Analysis Tool Based On Frida.re
frida-wshook is an analysis and instrumentation tool which uses frida.re to hook common functions often used by malicious script files which are run using WScript/CScript. The tool intercepts Windows API functions and doesn't implement function stubs or proxies within the targeted scripting...
CVE-2013-6791
Microsoft Enhanced Mitigation Experience Toolkit EMET before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming ROP attack...
PT-2013-6110
Name of the Vulnerable Software and Affected Versions Microsoft Enhanced Mitigation Experience Toolkit EMET versions prior to 4.0 Description The issue makes it easier for attackers to defeat the Address Space Layout Randomization ASLR protection mechanism. This is achieved through a...
Multiple antivirus and firewall memory corruption
Memory corruptions on SSDR hooked functions argument processing...
CORE FORCE firewall buffer overflow
Buffer overflow on IOCTLs and SSDT-hooked functions processing...
Kaspersky Internet Security privilege escalation
Invalid processing of SSDT hooked functions arguments...
Norton Personal Firewall / Norton Internet Security privilege escalation
Invalid processing of hooked functions parameters...
CVE-2007-0709: Undefined Security Weakness
cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.16.174 and earlier does not validate arguments that originate in user mode for the 1 NtCreateSection, 2 NtOpenProcess, 3 NtOpenSection, 4 NtOpenThread, and 5 NtSetValueKey hooked SSDT functions, which allows local users to...