[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

avast! Professional Edition < 5.0.418 Local Privilege Escalation

The remote Windows host is running avast! Professional Edition. The installed version of this software is potentially affected by a local privilege escalation vulnerability because the 'aavmker4.sys' driver fails to sufficiently sanitize user-supplied input passed via a specially crafted IOCTL...

CVE-2010-0454: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability

The host is installed with Kaspersky Anti-Virus 2010 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyav2010dosvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability Authors: Veerendra GG Copyright: Copyrig...

Gentoo Security Advisory GLSA 200911-04 (dstat)

The remote host is missing updates announced in advisory GLSA 200911-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2009-4114

Kaspersky Anti-Virus 2010 uses a vulnerable kl1.sys driver where IOCTL 0x0022c008 accepts crafted kernel addresses. The issue causes memory corruption that can crash the system via local access. Affected version range includes 9.0.0.463 and may include earlier builds up to 9.0.0.736; root cause d...

CVE-2009-4114: Improper Input Validation

kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service system crash via IOCTL requests using crafted kernel addresses that trigger memory corruption,...

Kaspersky Anti-Virus kl1.sys驱动本地拒绝服务漏洞

BUGTRAQ ID: 37044 Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky杀毒软件所使用的kl1.sys驱动没有检查IOCTL的输入地址，如果用户修改了一个或两个DWORD就可以触发异常，导致系统蓝屏死机。 Kaspersky Labs Kaspersky Antivirus 2010 9.0.0.463 厂商补丁： Kaspersky Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kaspersky.com/ include...

Oracle Database SUBSCRIPTION_NAME Parameter SQL Injection (CVE-2005-1197)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...

Oracle Database Server DBMS_METADATA Package SQL Injection (CVE-2005-1197)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...

Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption

No description provided by source. / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendor: Notified No L.P.E. for kiddie...

Avast! 4.8.1351.0 AntiVirus - aswMon2.sys Kernel Memory Corruption

Avast! 4.8.1351.0 AntiVirus - aswMon2.sys Kernel Memory Corruption / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendo...

FreeBSD fifo_vnops.c资源泄漏本地拒绝服务漏洞

BUGTRAQ ID: 36949 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的usr/src/sys/fs/fifofs/fifovnops.c文件中存在资源泄漏漏洞： / Open called to set up a new instance of a fifo or to find an active instance of a fifo. / / ARGSUSED / static int fifoopenap struct vopopenargs / struct vnode avp; int amode; struc...

Avast! Antivirus aavmKer4.sys驱动本地权限提升漏洞

BUGTRAQ ID: 36888 CVECAN ID: CVE-2009-3523 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus的AavmKer4.sys内核驱动没有正确地处理IOCTL（0xB2D6000C和0xB2D60034）请求，驱动将不可信任的用户态代码传送给了内核地址用作参数，本地用户通过特制的IOCTL调用就可以执行任意内核态指令。 ALWIL Software Avast! Antivirus 4.8 厂商补丁： ALWIL Software --------------...

kernel: SELinux and mmap_min_addr

The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to 1 the default configuration of the allowunconfinedmmapl...

Oracle Database Server SQL Injection In Package SYS.KUPV (CVE-2006-0586)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities

The remote Windows host is running avast! Professional Edition. The installed version of avast! Professional Edition is potentially affected by multiple issues : - A local privilege escalation vulnerability because the 'avast4.ini' file is created with insecure permissions on setup. CVE-2009-3524...

CVE-2009-3523

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

CVE-2009-3523: Improper Input Validation

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

CVE-2009-3522: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service system crash and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018...