CVE-2006-4614

PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under \HKEYCURRENTUSER\Software\PDAapps\VeriChat...

CVE-2006-4614

PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry under HKEY_CURRENT_USER\Software\PDAapps\VeriChat. This enables local users to obtain sensitive credentials from the registry, representing a local-attack exposure with plaintext crede...

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

CVE-2006-4615

The CVE documents a vulnerability in Shape Services IM+ Mobile Instant Messenger for Pocket PC, version 3.10, where usernames and passwords are stored in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg. This local-access issue allows a user with file-read privileges to obtain credentials. Affected ...

CVE-2006-4541

RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service crash via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected...

CVE-2006-4541

CVE-2006-4541 affects RapDrv.sys in BlackICE PC Protection 3.6.x and earlier variants, where a NULL third argument passed to NtOpenSection can crash the system, enabling local denial of service. The vulnerability is tied to the driver’s handling of NtOpenSection arguments. No exploitation details...

ISS BlackICE PC Protection DoS

Invalid NtOpenSection hook causes sytem to crash if 3rd paramter is NULL...

ISS BlackICE PC Protection Insufficient validation of arguments of NtOpenSection Vulnerability

Hello, I would like to inform you about a vulnerability in BlackICE PC Protection driver found by Matousec - Transparent security. Description: Hooking SSDT functions requires extra caution. SSDT function handlers are executed in the kernel mode but their callers are executed in the user mode...

[SA21710] BlackICE PC Protection "NtOpenSection()" Denial of Service

TITLE: BlackICE PC Protection "NtOpenSection" Denial of Service SECUNIA ADVISORY ID: SA21710 VERIFY ADVISORY: http://secunia.com/advisories/21710/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system SOFTWARE: BlackICE PC Protection 3.x http://secunia.com/product/1702/ DESCRIPTION: David Matous...

CVE-2006-3114

PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands...

CVE-2006-3114

PC Tools AntiVirus 2.1.0.51 is vulnerable due to insecure default permissions on the PC Tools AntiVirus directory, allowing local users to gain SYSTEM privileges by accessing and manipulating application files. The issue arises from granting Everyone Full Control on the directory and all child ob...

CVE-2006-3114

PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE (and possibly earlier) are vulnerable due to improper integrity checking of the pamversion.dll BlackICE library, allowing local users to subvert BlackICE by replacing pamversion.dll. The attack would generally require administrative privileges to repla...

Weak PC Tools antivirus permissions

Permissions for "PC Tools AntiVirus" folder are set to Everyone:Full Control during installation...

[Full-disclosure] Secunia Research: PC Tools AntiVirus Insecure Default Directory Permissions

====================================================================== Secunia Research 03/08/2006 - PC Tools AntiVirus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...

ISS BlackICE PC Protection DLL faking of run-time linked libraries Vulnerability

BlackICE does not protect pamversion.dll in its installation directory. And also because its component protection fails to protect BlackICE processes this can be misused to inject fake DLL into BlackICE service. The whole advisory with more details and source code is available here...

Microsoft Windows Server Driver Remote Information Disclosure Vulnerability

Description Microsoft Windows Server driver is susceptible to a remote information-disclosure vulnerability. This issue is due to a flaw in the handling of certain SMB traffic. Exploiting this issue allows remote attackers to gain access to potentially sensitive fragments of kernel memory. This m...

A small prank:clever uninstall public PC screensavers-vulnerability warning-the black bar safety net

The school computer laboratory is a plurality of classes of common, one class of students in class when specifying a screen saver and set a password, the next class of students in the class, if at the specified time, the minimum time is 1 minute without using a computer, i.e. run the screen saver...