CVE-2017-17409

CVE-2017-17409 affects Bitdefender Internet Security 2018. The vulnerability lies in the emulator 0x10A in cevakrnl.xmd, where improper validation of user-supplied data can cause an integer overflow before writing to memory. This can enable a remote attacker to execute arbitrary code with SYSTEM ...

CVE-2017-17410

Bitdefender Internet Security 2018 is affected by CVE-2017-17410 due to a flaw in emulator 0x102 within cevakrnl.xmd. The vulnerability stems from insufficient validation of user-supplied data, causing a write past the end of an allocated object, which can allow a remote attacker to execute arbit...

CVE-2017-17410

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Bitdefender Internet Security Integer Overflow Vulnerability

BitDefender Internet Security is security software that offers a wide range of protection features. An integer overflow vulnerability exists in the cevakrnl.xmd file in Bitdefender Internet Security due to the program failing to adequately validate user-supplied data. A remote attacker could...

Bitdefender Internet Security integer overflow vulnerability (CNVD-2017-38113)

BitDefender Internet Security is security software that offers a wide range of protection features. An integer overflow vulnerability exists in the cevakrnl.xmd file in Bitdefender Internet Security due to the program failing to adequately validate user-supplied data. A remote attacker could...

Mirai IoT Botnet Co-Authors Plead Guilty

The U.S. Justice Department on Tuesday unsealed the guilty pleas of two men first identified in January 2017 by KrebsOnSecurity as the likely co-authors of Mirai, a malware strain that remotely enslaves so-called "Internet of Things" devices such as security cameras, routers, and digital video...

Bitdefender Internet Security Emulator 0x10A Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security Emulator 0x102 Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Bitdefender Internet Security Themida Emulator Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Phishers Are Upping Their Game. So Should You.

Not long ago, phishing attacks were fairly easy for the average Internet user to spot: Full of grammatical and spelling errors, and linking to phony bank or email logins at unencrypted http:// vs. https:// Web pages. Increasingly, however, phishers are upping their game, polishing their copy and...

CVE-2017-13792

creationtimestamp| type| source ---|---|--- 2017-11-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43167...

CVE-2017-10954

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2017-10954

CVE-2017-10954 affects Bitdefender Internet Security 2018 (before build 7.72918). The flaw is in pdf.xmd and stems from improper validation of user-supplied data, causing an integer overflow during buffer allocation. This can allow remote code execution with SYSTEM privileges when a user visits a...

CVE-2017-10954

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

Google to add "DNS over TLS" security feature to Android OS

No doubt your Internet Service Provides ISPs, or network-level hackers cannot spy on https communications. But do you know — ISPs can still see all of your DNS requests, allowing them to know what websites you visit. Google is working on a new security feature for Android that could prevent your...

The vulnerability of Kaspersky Internet Security for Android, related to the lack of encryption for certain log file files, allows a hacker to disclose confidential information.

The vulnerability of Kaspersky Internet Security for Android lies in the lack of encryption for certain files in the logging application. Exploiting this vulnerability can allow a malicious actor to disclose confidential information remotely...

Today’s Predictions for Tomorrow’s Internet

This weekend I realized just how much the future of securing the Internet of Things IoT will become a critical component to maintain our lifestyle. CyberPatriot is the National Youth Cyber Education Program created by the Air Force Association to encourage careers in STEM. Each year the program...

Kaspersky Internet Security KL1 Driver Signal Handler Denial of Service(CVE-2016-4307)

Summary A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user...

Kaspersky Internet Security KLIF Driver NtUserCreateWindowEx_HANDLER Denial of Service(CVE-2016-4304)

Summary A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can ru...

Kaspersky Internet Security KLIF Driver NtAdjustTokenPrivileges_HANDLER Denial of Service(CVE-2016-4305)

Summary A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user mo...