88 matches found
ESET Smart Security 4.2 / NOD32 Antivirus 4.2 (x32-x64) LZH parsing PoC
Exploit for windows platform in category dos / poc ======================================================================= ESET Smart Security 4.2 / NOD32 Antivirus 4.2 x32-x64 LZH parsing PoC ======================================================================= ESET Smart Security 4.2 and NOD3...
ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86/x64) - LZH archive parsing (PoC)
ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. USAGE: python esetlzh.py TEST.LZH will be created c 2010 eSage Lab...
Design/Logic Flaw
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...
CVE-2008-7107
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...
CVE-2008-7107
CVE-2008-7107 affects ESET Smart Security 3.0.667.0; easdrv.sys can be triggered by a crafted IOCTL 0x222003 to the \.\easdrv interface, enabling local denial of service (crash). The NVD entry reports a base CVSS v2 score of 7.2 (LOCAL, low access complexity, no auth, complete impact on confident...
CVE-2008-7107
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service crash via a crafted IOCTL 0x222003 request to the \.\easdrv device interface...
NOD32 3.0/ESET Smart Security < 3.0.684 Local Privilege Escalation
NOD32 3.0/ESET Smart Security is installed on the remote host. The installed version is older than 3.0.684. Such versions are reportedly affected by a local privilege escalation issue. By sending a specially crafted request to an IOCTL request handler in 'epfw.sys', a local user may be able to...
CVE-2008-5724
The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...
CVE-2008-5724
The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...
CVE-2008-5724
CVE-2008-5724 affects the Personal Firewall driver (epfw.sys) in ESET Smart Security up to version 3.0.672, and the Personal Firewall component itself up to 3.0.672.0. The flaw allows local users to escalate privileges by sending a crafted IRP through a METHOD_NEITHER IOCTL to \Device\Epfw, which...
ESET Smart Security <= 3.0.672 (epfw.sys) Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | //...
ESET Smart Security epfw.sys驱动本地内核权限提升漏洞
BUGTRAQ ID: 32917 ESET Smart Security是一个集成的安全套装解决方案,适合普通个人消费者和中小型商业客户。 ESET Smart Security的epfw.sys设备驱动没有正确地验证传送给IOCTL处理器函数的地址，本地攻击者可以通过向IOCTL处理器函数提供特制的Irp用常数双字值覆盖用户提供的地址，导致以内核权限执行任意指令。 ... .text:000118DE @@ioctl0x8897229F: .text:000118DE push 4 .text:000118E0 pop eax .text:000118E1 cmp...
ESET Smart Security 3.0.672 - epfw.sys Local Privilege Escalation
ESET Smart Security 3.0.672 - epfw.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | ...
ESET Smart Security <= 3.0.672 (epfw.sys) Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ====================================================================== ESET Smart Security = 3.0.672 epfw.sys Privilege Escalation Exploit ======================================================================...
ESET Smart Security 3.0.672 - 'epfw.sys' Local Privilege Escalation
//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | // // | ESET Smart Security = 3.0.672...
CVE-2008-5527
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
Design/Logic Flaw
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5527
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5527
CVE-2008-5527 describes a malware-detection bypass in HTML documents when viewed with Internet Explorer 6/7, by prepending an MZ header (EXE info) and altering the filename to have no extension, .txt, or .jpg. The vulnerability is demonstrated via CVE-2006-5745 exploits. The connected records ind...
ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability
The host is running ESET Smart Security, which is prone to a local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodesetsmartseclocalprvescvuln900114.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability...