CVE-2010-5164

Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5181

Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5181

Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5167

CVE-2010-5167 affects Norman Security Suite PRO 8.0 on Windows XP. It describes a race condition that lets local attackers bypass kernel-mode hook handlers by specific user-space memory changes during hook-handler execution (KHOBE attack), potentially enabling code execution blocked by handlers b...

PT-2012-1389 · Sophos · Sophos Endpoint Security/Control

Name of the Vulnerable Software and Affected Versions: Sophos Endpoint Security and Control version 9.0.5 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during...

PT-2012-1391 · Trend Micro · Trend Micro Internet Security Pro

Name of the Vulnerable Software and Affected Versions: Trend Micro Internet Security Pro 2010 version 17.50.1647.0000 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

Frankenstein Malware turning legitimate software into invisible malware

Many malware and viruses can be identified by detection software because of known bits of malicious code. But what if there was a virus compiled from little bits of programs you already had installed? That's just what two security researchers are looking into. Frankenstein or The Modern Prometheu...

CVE-2010-3498

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...

Remote code execution

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...

Remote code execution

McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection...

CVE-2010-3498

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...

Ubuntu 11.04 / 11.10 / 12.04 LTS : clamav regression (USN-1482-3)

USN-1482-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan files in some situations. This update fixes the problem. We apologize for the inconvenience. It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create...

RiskRanker : A New malware detection technique

RiskRanker : A New malware detection technique For many years, mobile security experts have been fighting an uphill battle against malware, which has been steadily and dramatically increasing in both volume and sophistication. Well, NQ Mobile's Mobile Security Research Center, in collaboration wi...

Travel Security Rundown

Summer travel season is well under way and considering the increasingly common reports detailing device seizures and data searches at international borders, you want to be very careful about the things you travel with. In a recently published SecureList article, Kaspersky Lab expert Dmitry...

Ubuntu: Security Advisory (USN-1482-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

zDefender - Enterprise smartphone IDS/IPS released by Zimperium

zDefender - Enterprise smartphone IDS/IPS released by Zimperium Do you recall the security firm Zimperium which came out with ANTI, the killer Android app that allowed even the clueless to hack and pwn like a pentester? Zimperium, an Israeli security start up founded by Zuk Avraham, a...

CVE-2012-1907

The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML aka Open Document XML file format, which allows remote attackers to bypass malware detection via a crafted file embedded in a WordML document...

Format string

The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML aka Open Document XML file format, which allows remote attackers to bypass malware detection via a crafted file embedded in a WordML document...

CVE-2012-1907

CVE-2012-1907 affects the PrivaWall Antivirus scanner engine (versions ≤ 5.6). The root cause is the engine’s failure to recognize Office XML/Open Document XML format, enabling a crafted file embedded in a WordML document to bypass malware detection. Impact: potential to evade scanning and malwar...

CVE-2012-1907

The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML aka Open Document XML file format, which allows remote attackers to bypass malware detection via a crafted file embedded in a WordML document...