Symantec Norton Antivirus NAVOPTS.DLL ActiveX Control Remote Code Execution Vulnerability

Description Symantec Norton Antivirus ActiveX control is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits will allow attackers to execute arbitrary code in the context of th...

Security Best Practice: Protect Yourself against FTP Format Strings Attacks

The File Transfer Protocol FTP is used to connect computers over the Internet enabling file transferring between their users. FTP format string attacks are a common threat on vulnerable systems. Format string attacks can be used to crash a program or to execute malicious code. Successful format...

Design/Logic Flaw

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

Design/Logic Flaw

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

Heap overflow

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...

CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

CVE-2007-1112

CVE-2007-1112 affects Kaspersky Anti-Virus 6.0 and Internet Security 6.0. The issue is exposed in ActiveX controls AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll), allowing remote attackers to download or delete arbitrary files via crafted arguments to Delete...

Multiple Kaspersky Antivirus / Internet Security security vulnerabilities

Multiple unsafe ActiveX methods allows files uploading from vulnerable host. Buffer overflow on ARJ files parsing. Local driver buffer overflow...

XOOPS Module Tutoriais - viewcat.php SQL Injection

XOOPS Module Tutoriais - viewcat.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module Tutoriais viewcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://xoops.pr.gov.br/ $$ : ?? . : Tested on xoops.pr.gov.br .. : ajann,Turkey use IO::Socket;...

DNS resolution is tampered with motivation what-vulnerability warning-the black bar safety net

The day before yesterday, in the qq group to 365.com the one called fm165 a message, ask us 265.com whether being attacked, the traffic is back to where they went, only found on the day didn't how long it has been there for more than 2 0 million of traffic in the past. After confirmed, in additio...

CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

Future Internet - index.cfm?categoryId Cross-Site Scripting

Future Internet - index.cfm?categoryId Cross-Site Scripting source: https://www.securityfocus.com/bid/21727/info Future Internet is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied...

Beat the security system of the series of articles of the breakthrough card bar 6-vulnerability warning-the black bar safety net

Beat the Security System Series0before the statement Recently more and more feel this stage all kinds of security system design there are some shortcomings, not the various possible security threats into account, in Cever Hackers front can not do anything. In order to help all kinds of security...

CVE-2006-6496

CA vulnerability CVE-2006-6496 affects CA Anti-Virus 2007 v8.1, CA Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0, due to improper handling of NULL buffers in VetMONNT.sys and VetFDDNT.sys that allows a local administrator to crash the system via certain IOCTLs. The issue...

ISAA-2006-010.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2006-010 - Original release date: September 28, 2006 - Last revised: December 1, 2006 - Discovered by: Vicente Aguilera Diaz - Severity: 3/5 ============================================= I. VULNERABILITY...

Computer Associates CA Internet Security / CA Personal Firewall privilege escalation

Insufficient TDI and NDIS hooked function paramters validation...

[Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.

Computer Associates "Host Intrusion Prevention System" Engine Drivers are prone to multiple local privilege escalation vulnerabilities. Unprivileged users can take advantage of these flaws in order to execute arbitrary code with kernel privileges. Two drivers are affected, kmxstart.sys and...

Kaspersky Internet Security 6.0.0.303 IOCTL KLICK Local Exploit

No description provided by source. //////////////////////////////////// ///// AVP Kaspersky //////////////////////////////////// //// FOR EDUCATIONAL PURPOSES ONLY //// Kernel Privilege Escalation 2 //// Exploit //// Rubén Santamarta //// www.reversemode.com //// 01/09/2006 //// //// ////Modify b...

Kaspersky Internet Security 6.0.0.303 - IOCTL KLICK Local Overflow Local Privilege Escalation

Kaspersky Internet Security 6.0.0.303 - IOCTL KLICK Local Overflow Local Privilege Escalation //////////////////////////////////// ///// AVP Kaspersky //////////////////////////////////// //// FOR EDUCATIONAL PURPOSES ONLY //// Kernel Privilege Escalation 2 //// Exploit //// Rubén Santamarta ////...