CVE-2024-27518

CVE-2024-27518 - SUPERAntiSpyware Professional X LPE PoC This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: SUPERAntiSpyware Professional X and all editions...

CVE-2020-24955

CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Local Privilege Escalation SUPERAntiSpyware Professional X Trial versions prior to 10.0.1206 are vulnerable to local privilege escalation because it allows unprivileged users to restore quarantined files to a privileged location...

PT-2024-21928 · Unknown · Superantispyware Professional

Name of the Vulnerable Software and Affected Versions: SUPERAntiSpyware Professional X versions 10.0.1262 through 10.0.1264 Description: The issue allows unprivileged attackers to escalate privileges via a restore of a crafted DLL file into the C:Program FilesSUPERAntiSpyware folder...

PT-2020-15868

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional X Trial version 10.0.1206 Description The issue allows local privilege escalation by permitting unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction...

SUPERAntiSpyware Professional Trial Denial of Service Vulnerability (CNVD-2018-02916)

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SASKUTIL.SYS driver file in SUPERAntiSpyware Professional Trial version 6.0.1254, which originates from the program's...

SUPERAntiSpyware Professional Trial Elevation of Privilege Vulnerability

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SUPERAntiSpyware.exe file in SUPERAntiSpyware Professional Trial version 6.0.1254. An attacker can exploit this...

CVE-2018-6475

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...

Input validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148...

CVE-2018-6475

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...

CVE-2018-6474: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148...

CVE-2018-6475: Untrusted Search Path

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...

CVE-2018-6476: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating input values from IOCtl 0x9C402114 or 0x9C402124 or 0x9C40207c...

CVE-2018-6471: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078...

CVE-2018-6473: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080...

CVE-2018-6472: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c...

PT-2018-17570

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402080, allowing local users to cause a denial of service, potentially...

PT-2018-17568

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402078, allowing local users to cause a denial of service, potentially...

PT-2018-17573

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the SASKUTIL.SYS driver in SUPERAntiSpyware Professional Trial, which allows privilege escalation to NT AUTHORITYSYSTEM. This is due to the driver not...

PT-2018-17571

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402148, allowing local users to cause a denial of service, potentially...

PT-2018-17572

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue allows DLL hijacking, which can lead to Escalation of Privileges. This occurs due to a flaw in SUPERAntiSpyware.exe. Recommendations For version 6.0.1254, consider...