170 matches found
WildBit Viewer 缓冲区错误漏洞
WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in ntdll!RtlpCoalesceFreeBlocks+0x268 in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted tiff file...
BACKDOOR.WIN32.BNLITE Remote Heap Corruption
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/f78cef7588f9c32609a4932d10c67f95.txt Contact: [email protected] Media: twitter.com/malvuln Threat: BACKDOOR.WIN32.BNLITE Vulnerability: Remote Heap Corruption Description: When sending a specially...
WOW64!Hooks: WOW64 Subsystem Internals and Hooking Techniques
Microsoft is known for their backwards compatibility. When they rolled out the 64-bit variant of Windows years ago they needed to provide compatibility with existing 32-bit applications. In order to provide seamless execution regardless of application bitness, the WoW Windows on Windows system wa...
Heap overflow
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...
CVE-2019-18820
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...
PT-2019-15679
Name of the Vulnerable Software and Affected Versions Eximious Logo Designer version 3.82 Description The issue is related to Heap Corruption, specifically starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. Recommendations For Eximious Logo Designer version 3.82, at the moment, there is...
CVE-2019-18820: Out-of-bounds Write
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...
Vulnerability of the ntdll function! The RtlRaiseStatus function in the WebAccess HMI Designer software development and management tool allows a hacker to cause a service failure.
The vulnerability of the ntdll!RtlRaiseStatus0x00000000000000b function in the WebAccess HMI Designer software for developing and managing HMI applications is related to deficiencies in handling exceptional states. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2019-16901
Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4...
CVE-2019-16901: Improper Handling of Exceptional Conditions
Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4...
PT-2019-3570
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/HMI Designer version 2.1.9.31 Description The issue is related to Exception Handler Chain corruption in the Advantech WebAccess/HMI Designer, specifically involving the ntdll!RtlRaiseStatus function. This corruption can be...
In NTDLL I Trust – Process Reimaging and Endpoint Security Solution Bypass
ARCHIVED STORY In NTDLL I Trust – Process Reimaging and Endpoint Security Solution Bypass By Eoin Carroll · June 20, 2019 Process Reimaging Overview The Windows Operating System has inconsistencies in how it determines process image FILEOBJECT locations, which impacts non-EDR Endpoint Detection a...
CVE-2019-12896
Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...
Heap overflow
Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...
Code injection
Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...
CVE-2019-12899
Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...
CVE-2019-12896
Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...
PT-2019-13009
Name of the Vulnerable Software and Affected Versions Delta Electronics DeviceNet Builder version 2.04 Description The issue is related to a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3. Recommendations For Delta Electronics DeviceNet Builder version 2.04, at the momen...
PT-2019-13006
Name of the Vulnerable Software and Affected Versions Edraw Max version 7.9.3 Description The issue is related to Heap Corruption, specifically starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77. Recommendations For Edraw Max version 7.9.3, at the moment, there is no information about a...