ZoneAlarm Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, We would like to inform you about a vulnerability in ZoneAlarm 6. Description: ZoneAlarm hooks many functions in SSDT and in at least two cases it fails to validate arguments that come from the user mode. User calls to NtCreateKey and NtDeleteFile with invalid argument values can cause...

CVE-2006-3074

KVE-2006-3074 affects Kaspersky Internet Security 6.0/7.0 and KAV 6.0/7.0 (Windows Workstations/Servers). The vulnerability arises from insufficient validation of parameters to hooked system calls (NtCreateKey, NtCreateProcess, NtCreateProcessEx, NtCreateSection, NtCreateSymbolicLinkObject, NtCre...