Cross site request forgery (csrf)

The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...

CVE-2008-5724

The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...

CVE-2008-5724

The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...

CA kmxfw.sys Code Execution and DoS Vulnerabilities

This host is running CA Products, which is prone to Local Code Execution and Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcaprdtsmultvuln900202.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: CA kmxfw.sys Code Execution and DoS Vulnerabilities. Authors: Veerendra GG...

Design/Logic Flaw

Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System HIPS r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."...

CVE-2002-2397

The CVE-2002-2397 entry concerns Sygate Personal Firewall 5.0, where a remote attacker could bypass firewall filters by spoofing the source IP to 127.0.0.1 or the 127.0.0.0 network. The connected records reiterate the same description (product/version and bypass via spoofed loopback addresses) bu...

CVE-2002-2336

Summary: CVE-2002-2336 affects Norton Personal Firewall 2002 4.0. When configured to automatically block attacks, it allows remote attackers to block IP addresses and cause a denial of service through spoofed packets. The available sources (NVD/Red Hat/Rapid CVE entries) describe the same behavio...

CVE-2002-2336

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2003-1491

Kerio Personal Firewall KPF 2.1.4 has a default rule to accept incoming packets from DNS UDP port 53, which allows remote attackers to bypass the firewall filters via packets with a source port of 53...

CVE-2003-1491

CVE-2003-1491 affects Kerio Personal Firewall 2.1.4, where a default DNS (UDP 53) inbound rule permits packets from source port 53, enabling remote bypass of firewall filters. This is a network-accessible bypass vulnerability; exploitation details are provided in multiple sources (NVD/NIST, CVE l...

CVE-2007-4967

Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API...

CVE-2007-4967

CVE-2007-4967 affects Online Armor Personal Firewall 2.0.1.215. The issue stems from improper validation of parameters to System Service Descriptor Table (SSDT) function handlers, enabling a local attacker to trigger a denial of service (crash) and potentially gain privileges via unspecified kern...

Norton Personal Firewall ISAlertDataCOM ActiveX控件缓冲区溢出漏洞

Norton Personal Firewall是一款个人防火墙应用程序。 Norton Personal Firewall包含的ISAlertDataCOM ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 当ISLAlert.dll处理"Set"和"Get"方法时存在边界错误，提交超长参数可导致缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 Symantec Norton Internet Security 2004 Symantec Norton Internet Security...

Design/Logic Flaw

The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 CS3, does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall rules...

CVE-2007-2682

The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 CS3, does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall rules...

Symantec Norton个人防火墙ActiveX控件远程溢出漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 Norton个人防火墙的ISLALERT.DLL库中ISAlertDataCOM函数所使用的Get和Set函数没有正确验证输入参数，如果用户受骗浏览了特制的HTML文档的话，就可能触发缓冲区溢出，导致以登录用户的权限执行任意指令。 Symantec Norton Personal Firewall 2004 Symantec Norton Internet Security 2004 临时解决方法：...

Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability

SYM07-007 May 16, 2007 Symantec Norton Personal Firewall 2004 ActiveX Control Buffer Overflow Risk Impact Medium Affected Products Norton Internet Security 2004 Norton Personal Firewall 2004 Details CERT notified Symantec that a buffer overflow exists in an ActiveX Control used by Norton Personal...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

Buffer overflow

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...