356 matches found
CVE-2009-0682
vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service system crash via a crafted call...
CVE-2009-0682
CA Internet Security Suite vulnerable to local denial-of-service via IOCTL handling in vetmonnt.sys. Affects CA Internet Security Suite r3, and r4 up to 9.0.0.184, and r5 up to 10.0.0.217. The IOCTL verifier did not properly validate the Irp-buffer, enabling a crafted IOCTL to crash the system. P...
Buffer overflow
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information...
CVE-2008-7009
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information...
CVE-2008-7009
CVE-2008-7009 describes a buffer overflow in ZoneAlarm Security Suite’s multiscan.exe affecting ZoneAlarm Internet Security Suite 7.0.483.000 and 8.0.020.000. The vulnerability allows a local attacker to execute arbitrary code by supplying a file or directory path that is excessively long. The pr...
CVE-2008-7009
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information...
CA20090818-02: Security Notice for CA Internet Security Suite
CA20090818-02: Security Notice for CA Internet Security Suite Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Internet Security Suite. A vulnerability exists that can allow a local attacker to cause a denial of service. CA has issued updates to...
Trend Micro InterScan Web Security Suite Default Credentials
Trend Micro InterScan Web Security Suite is installed on the remote host. It is possible to log into the web management interface using default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid35649;...
Trend Micro InterScan Web Security Suite < 3.1 Build 1237 Multiple Flaws
Trend Micro InterScan Web Security Suite is installed on the remote host. The installed version fails to restrict non-admin accounts 'Auditor' and 'Report Only' from modifying system configurations even though these accounts do not have sufficient permissions. C Tenable Network Security, Inc...
Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference
Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...
PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability
Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...
ESET Smart Security epfw.sys驱动本地内核权限提升漏洞
BUGTRAQ ID: 32917 ESET Smart Security是一个集成的安全套装解决方案,适合普通个人消费者和中小型商业客户。 ESET Smart Security的epfw.sys设备驱动没有正确地验证传送给IOCTL处理器函数的地址，本地攻击者可以通过向IOCTL处理器函数提供特制的Irp用常数双字值覆盖用户提供的地址，导致以内核权限执行任意指令。 ... .text:000118DE @@ioctl0x8897229F: .text:000118DE push 4 .text:000118E0 pop eax .text:000118E1 cmp...
Kaspersky Internet Security Suite Malformed MIME Message DoS Vulnerability
This host has Kaspersky Internet Security Suite installed and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyinternetsecsuitedosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Kaspersky Internet Security Suite Malformed MIME Message DoS Vulnerability Authors:...
CVE-2008-5530
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
Design/Logic Flaw
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5530
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5530
CVE-2008-5530 describes a bypass of malware detection in HTML documents triggered when Internet Explorer 6/7 is used. The root cause involves placing an MZ header (EXE info) at the start of the document and manipulating the filename extension (no extension, .txt, or .jpg) to exploit a CVE-2006-57...
Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)
Crashing ZoneAlarm 8.0.020.000 by Checkpoint Component : TrueVector ========================================== - Keep ZoneALarm 8 running with vsmon.exe running which runs by default - On System A : Run the rogue proxy attached zacrasherproxy.exe and set a port number eg: zacrasherproxy.exe 5938 ...
KLA10063 ACE vulnerability in Avira
A nonsecure function call vulnerability was found in Avira. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to the scheduler via a specially designed .exe file. Original advisories detailed description...
ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service
ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service source: https://www.securityfocus.com/bid/31431/info ZoneAlarm Internet Security Suite is prone to a remote denial-of-service vulnerability that occurs in the TrueVector component when connecting to a malicious HTTP proxy. ZoneAlarm Internet...