WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in ntdll!RtlpCoalesceFreeBlocks+0x268 in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted tiff file...

BACKDOOR.WIN32.BNLITE Remote Heap Corruption

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/f78cef7588f9c32609a4932d10c67f95.txt Contact: [email protected] Media: twitter.com/malvuln Threat: BACKDOOR.WIN32.BNLITE Vulnerability: Remote Heap Corruption Description: When sending a specially...

WOW64!Hooks: WOW64 Subsystem Internals and Hooking Techniques

Microsoft is known for their backwards compatibility. When they rolled out the 64-bit variant of Windows years ago they needed to provide compatibility with existing 32-bit applications. In order to provide seamless execution regardless of application bitness, the WoW Windows on Windows system wa...

Heap overflow

Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...

CVE-2019-18820

Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...

Vulnerability of the ntdll function! The RtlRaiseStatus function in the WebAccess HMI Designer software development and management tool allows a hacker to cause a service failure.

The vulnerability of the ntdll!RtlRaiseStatus0x00000000000000b function in the WebAccess HMI Designer software for developing and managing HMI applications is related to deficiencies in handling exceptional states. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2019-16901

Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4...

In NTDLL I Trust – Process Reimaging and Endpoint Security Solution Bypass

ARCHIVED STORY In NTDLL I Trust – Process Reimaging and Endpoint Security Solution Bypass By Eoin Carroll · June 20, 2019 Process Reimaging Overview The Windows Operating System has inconsistencies in how it determines process image FILEOBJECT locations, which impacts non-EDR Endpoint Detection a...

CVE-2019-12896

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

Code injection

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

Heap overflow

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

CVE-2019-12899

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

CVE-2019-12896

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

Design/Logic Flaw

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem...

Code injection

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString...

CVE-2019-9965

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap...

CVE-2019-9968

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem...

CVE-2019-9968

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem...

CVE-2019-9968

CVE-2019-9968 affects XnView Classic 2.48 on Windows. The issue is a denial of service (application crash) via a crafted file, related to ntdll!RtlQueueWorkItem. Connected data confirms the vulnerable product/version and the crash/impact, but there is no explicit remediation, patch version, or ex...

CVE-2019-9967

CVE-2019-9967 affects XnView Classic 2.48 on Windows. The vulnerability allows a remote attacker to trigger a denial of service (application crash) or potentially other impact via a specially crafted file, related to ntdll!RtlPrefixUnicodeString. The connected Red Hat, CNVD, CNVD-like entries con...