Microsoft Windows Kernel NULL Pointer Dereferencing (MS09-058; CVE-2009-2516)

The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been discovered in the Windows kernel. The vulnerability is due to an error in the Windows kern...

ClamAV libclamav PE File Handling Integer Overflow (CVE-2008-0318)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several archive formats in order to scan their internal items for viruses. One of such archive formats is the Petite packed PE file format. A buffer...

ClamAV libclamav MEW PE File Handling Integer Overflow (CVE-2007-6335)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several archive formats in order to scan their internal items for viruses. One of such archive formats is the MEW file format. A buffer overflow...

Ubuntu 8.10 : clamav vulnerabilities (USN-754-1)

It was discovered that ClamAV did not properly verify its input when processing TAR archives. A remote attacker could send a specially crafted TAR file and cause a denial of service via infinite loop. CVE-2009-1270 It was discovered that ClamAV did not properly validate Portable Executable PE...

Using cmd hide from anti-virus and firewall method-vulnerability warning-the black bar safety net

我们 可以 把 SkSockServer.exe 更改 为 sk.jpg In this case, antivirus software will not check out. In direct double-click to perform the change through the extension of the program time, the system will ask in what way open, that is to say windows didn't recognize it. But we in the cmd command line it can...

Mandriva Update for clamav MDVSA-2008:003 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:003 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

DEBIAN-CVE-2008-6680

libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error...

CVE-2008-6661

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...

Integer overflow

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...

CVE-2008-6661

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...

USN-754-1: ClamAV vulnerabilities

It was discovered that ClamAV did not properly verify its input when processing TAR archives. A remote attacker could send a specially crafted TAR file and cause a denial of service via infinite loop. CVE-2009-1270 It was discovered that ClamAV did not properly validate Portable Executable PE...

ClamAV < 0.95 Scan Evasion

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.95. Such versions are affected by multiple vulnerabilities : - A failure to handle certain malformed 'RAR' archive files could make it possible for certain archive files to evade detection from the scan...

Crack the freezing point Restore Wizard（Deep Freeze of approach-vulnerability warning-the black bar safety net

Here and share with you my results, the previous is the freezing point restore screwed, and everyone else previously met the problem is: Ctrl+Shift+Alt+F6 or Shift double click the Deep Freeze icon call not the freezing point, so that only every time you restart your computer the restore, the...

BitDefender PE文件解析整数溢出漏洞

BUGTRAQ ID: 32751 BitDefender Antivirus是具有功能强大的反病毒引擎以及互联网过滤技术的杀毒软件。 BitDefender在处理畸形结构的PE文件时存在漏洞，如果使用GNU/Linux版本的BitDefender扫描到了NeoLite或ASProtect封装的特制PE文件的话，就可能触发整数溢出，导致扫描引擎崩溃。 Softwin BitDefender v7 for Linux Softwin ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Teach you crack the xp administrator privilege-vulnerability warning-the black bar safety net

Starters: Awolf’S Security Blog A． Things causes Day sweating to put my brother's computer to get it back. But back home a enter the system password, asked n times, the password is wrong. （Forget）and plus I use a usb Keyboard, with the ghost system disk to crack to crack the program when the...

And then the explosion a few micro-points have not fortified from the start or passive start-vulnerability warning-the black bar safety net

From a friend: large ravioli 1. cmd to run before the execution of the programsysnap inform --passive start HKEYCURRENTUSER\Software\Microsoft\Command Processor AutoRun REGSZ "xxx.exe" 2. session manager-from the start HKEYLOCALMACHINE\SYSTEM\ControlSet001\Control\Session Manager...

4 kinds of the most popular Trojans bundled Controller skills-vulnerability warning-the black bar safety net

A traditional bundle This principle is very simple, is currently the most used one. Is the B. exe attached to A. exe at the end. So when A. exe to be executed when the B. exe also follow the implementation. This bundle of code over the network. My earliest is from jingtao's an article about the...

Microsoft Malware Protection Engine TWO DoS Vulnerabilities

CVE-2008-1437 CVE-2008-1438 There are two vulnerabilities idenitified in Microsoft Antivirus product. These vulnerabilities can be exploited to cause Denial of service. 1. CVE-2008-1437 PE Parsing Memory Corruption While scanning a specially crafted PE file, Malware orotection engine...

Share Trojan-free kill technology experience-vulnerability warning-the black bar safety net

Trojan horsefree kill,in the country should originate in the 0 to 5 years. From then on a single feature of the code is now a composite signature,antivirus software from Active defense to Active Defense. Free to killtechnology is increasingly difficult. But plus ça change--change the feature code...

CVE-2008-1158

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via malformed packets, aka Bug ID CSCsh50164...