PT-2016-2644

Name of the Vulnerable Software and Affected Versions Kaspersky Total Security affected versions not specified Kaspersky Internet Security affected versions not specified Description The issue is related to multiple information leaks in the KLDISK driver of Kaspersky security products. These leak...

CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

Heap overflow

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

CVE-2015-8620: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

Memory corruption

The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service crash and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function...

CVE-2014-2382

The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service crash and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function...

CVE-2014-2382

The CVE-2014-2382 issue affects the DfDiskLo.sys driver in Faronics Deep Freeze Standard/Enterprise ≤8.10. A crafted IOCTL request allows writing to arbitrary memory via the IofCallDriver path, enabling local administrators to crash the system or execute arbitrary code with kernel-level privilege...

PT-2014-4668

Name of the Vulnerable Software and Affected Versions Faronics Deep Freeze Standard and Enterprise versions 8.10 and earlier Description The issue allows local administrators to cause a denial of service and execute arbitrary code via a crafted IOCTL request. This is related to the IofCallDriver...

CVE-2014-2382: Undefined Security Weakness

The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service crash and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function...

CVE-2013-5691: Undefined Security Weakness

The 1 IPv6 and 2 ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK requests, which allows local users to perform link-layer actions, cause a denial of service panic, or possibly gain privilege...

CVE-2011-5032

WMDrive.sys 3.4.181.224 in WinMount 3.5.1018 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted 0x87342000 IOCTL request to the WMDriver device...

CVE-2011-5032

WMDrive.sys 3.4.181.224 in WinMount 3.5.1018 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted 0x87342000 IOCTL request to the WMDriver device...

Linux <= 2.6.37-rc1 serial_core TIOCGICOUNT Leak Exploit

Exploit for linux platform in category dos / poc / Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a...

CVE-2011-0652

lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service crash via a crafted 0x80000064 IOCTL request that triggers an assertion failure. NOTE: some of these details are obtained from third party information...

PT-2011-2530

Name of the Vulnerable Software and Affected Versions Look 'n' Stop Firewall versions 2.06p4 through 2.07 Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by sending a crafted 0x80000064 IOCTL request, which triggers an assertion...

CVE-2011-0652: Improper Input Validation

lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service crash via a crafted 0x80000064 IOCTL request that triggers an assertion failure. NOTE: some of these details are obtained from third party information...

AVG Internet Security IOCTL请求本地拒绝服务漏洞

BUGTRAQ ID: 44596 AVG Internet Security可为用户上网提供多层保护。 AVG Internet Security所使用的avgtdix.sys内核驱动没有正确地处理IOCTL请求，本地用户可以通过发布恶意的0x830020C8 IOCTL请求触发内核内存破坏，导致系统蓝屏死机。 AVG Internet Security 9.0.851 厂商补丁： AVG --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.grisoft.com/us/usindex.php / Exploit...

QQ Computer Manager TSKsp.sys Driver Denial Of Service

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

Design/Logic Flaw

The dogfs2setflags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request...