Jiangmin Antivirus Denial of Service Vulnerability (CNVD-2018-03290)

Jiangmin Antivirus is a set of online antivirus software from the Chinese Jiangmin Jiangmin New Technology Company. A security vulnerability exists in the KrnlCall.sys driver file in Jiangmin Antivirus version 16.0.0.100, which is caused by the program failing to validate the input value of IOCtl...

CVE-2018-6769

In Jiangmin Antivirus 16.0.0.100, the driver file KrnlCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008020...

Race condition

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel...

CVE-2017-15847

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel...

UBUNTU-CVE-2017-15847

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel...

CVE-2017-15847

CVE-2017-15847. A race condition in the SPCom kernel driver on Android for MSM (CAF Linux kernel lineage) during channel creation. Affected: Android variants using CAF/Linux kernel with SPCom. Impact per NVD: partial confidentiality/integrity/availability impact; CVSSv3 base score 7.0 (HIGH), LOC...

CVE-2017-15848

CVE-2017-15848 affects Android for MSM (CAF builds) via the fastrpc kernel driver. A userspace-triggered buffer overflow in the fastrpc driver is the stated vulnerability, potentially enabling local impact with high CVSS2/3 scores (LOCAL, LOW/LOW privileges for CVSS2; LOCAL, LOW privileges, NONE ...

Kingsoft Antivirus / Internet Security 9+ Privilege Escalation

''' Vulnerability Summary The following advisory describes a kernel stack buffer overflow that leads to privilege escalation found in Kingsoft Antivirus/Internet Security 9+. Kingsoft Antivirus aprovides effective and efficient protection solution at no cost to users. It applies cloud security...

CVE-2018-5087

In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002100...

CVE-2018-5082

In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002128...

MacOS LPE Exploit Gives Attackers Root Access

A researcher that goes by the handle “Siguza” released details of a local privilege escalation attack against macOS that dates back to 2002. A successful attack could give adversaries complete root access to targeted systems. Siguza released details of the attack on Dec. 31 via Twitter, wishing...

Kingsoft Antivirus/Internet Security 9+ Privilege Escalation Exploit

Exploit for windows platform in category dos / poc Vulnerability Summary The following advisory describes a kernel stack buffer overflow that leads to privilege escalation found in Kingsoft Antivirus/Internet Security 9+. Kingsoft Antivirus “provides effective and efficient protection solution at...

CVE-2017-17803

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475...

K7 Antivirus K7Sentry.sys Denial of Service Vulnerability (CNVD-2018-01083)

K7 Antivirus is a suite of anti-virus software from the Indian company K7 Computing.K7Sentry.sys is one of the kernel-mode drivers used in K7 Computing's security products. A security vulnerability exists in K7 Antivirus version 15.1.0309 in K7Sentry.sys version 15.1.0.59. An attacker can exploit...

K7 AntiVirus Null Pointer Dereference Vulnerability (CNVD-2018-00251)

K7 Antivirus is a suite of anti-virus software from the Indian company K7 Computing.K7Sentry.sys is one of the kernel-mode drivers used in K7 Computing's security products. A security vulnerability exists in K7 Antivirus version 15.1.0309 in K7Sentry.sys version 15.1.0.59. An attacker can exploit...

Race condition

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the GLink kernel driver, a Use After Free condition can potentially occur...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2017-36938)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and NVIDIA driver is a graphics driver developed by NVIDIA. An elevation of privilege vulnerability exists in the NVIDIA driver for Android, which stems from the program's failure to...

Symantec Encryption Desktop And Endpoint Encryption Local Privilege Escalation

Vulnerabilities in Symantec Encryption Desktop and Endpoint Encryption allow an attacker to attain arbitrary hard disk read and write access at sector level, and subsequently infect the target and gain low level persistence MBR/VBR. They also allow the attacker to execute code in the context of t...

Buffer overflow

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a buffer overflow can occur in HDMI CEC parsing if frame size is out of range...

Interface Aware Fuzzing for Kernel Drivers: DIFUZE

Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system...