KLA10947 Denial of service vulnerability in Kaspersky products

Vulnerability was found in window broadcast message handling functionality of Kaspersky products. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited locally via a specially designed unhandled window messages, which cause termination...

CVE-2017-5005

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LCUNIXTHREAD.cmdsize field in a Mach-O file that is mishandle...

CVE-2017-5005: Out-of-bounds Write

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LCUNIXTHREAD.cmdsize field in a Mach-O file that is mishandle...

Multiple vulnerabilities in the Kaspersky Total Security antivirus protection system allow attackers to obtain confidential information.

The multiple vulnerabilities of the KLDISK driver in the Kaspersky Total Security antivirus protection software are related to the lack of protection for operational data. Exploiting these vulnerabilities could allow an intruder, operating locally, to gain access to confidential information—such ...

Multiple Kaspersky Products Information Disclosure Vulnerabilities

Kaspersky Internet Security is a suite of security software that combines antivirus and firewall functionality.Kaspersky Antivirus and Total Security are both antivirus programs from Kaspersky Labs. An information disclosure vulnerability exists in several Kaspersky products, which could be...

Local Denial of Service Vulnerability in Multiple Kaspersky Products

Kaspersky Internet Security is a suite of security software that combines the functions of an antivirus and a firewall.Kaspersky Antivirus/Total Security is an antivirus program from Kaspersky Labs. A local denial of service vulnerability exists in several Kaspersky products, which could be...

Total Security < 3.4.1 - XSS & Settings Change

The Total Security WordPress plugin was affected by a XSS & Settings Change security vulnerability...

Qihu 360 Total Security 2016 Local Code Execution Vulnerability

Qihu 360 Total Security 2016 is a suite of free antivirus software from China's Qihu 360 Qihu 360 released to overseas markets. A local code execution vulnerability exists in the Qihu 360 Total Security 2016 version, which can be exploited by a local attacker to execute arbitrary code in an...

360 Total Security 2016 DLL Hijacking

Aloha, 360TSESetup8.2.0.1039.exe loads and executes WindowsCodecs.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented...

Kaspersky Total Security Version Detection

Detects the installed version of Kaspersky Total security on Windows. The script logs in via smb, searches for kaspersky in the registry, gets the kaspersky total security installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...

Kaspersky Total Security Security Bypass Vulnerability

Kaspersky Total security is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerabilities of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security allow attackers to bypass the DEP and ASLR protection mechanisms.

The vulnerability of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security anti-virus tools is related to the allocation of memory with read, write, and execute permissions during the protection of user processes. Exploiting this vulnerability can allow a malicious actor...

Kaspersky Total Security Security Bypass Vulnerability

Kaspersky Total Security is a comprehensive multi-device version of the Russian antivirus program. The Kaspersky Total Security program protects user-mode processes by allocating memory with Read, Write, Execute RWX privileges in predictable addresses, allowing an attacker to exploit this...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8579

The CVE targets Kaspersky Total Security 2015 (version 15.0.2.361). The vulnerability arises from memory allocations that use Read, Write, Execute (RWX) permissions at predictable addresses while protecting user‑mode processes. This root cause enables bypass of DEP and ASLR protections. Details a...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8579: Undefined Security Weakness

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

AVG, McAfee, Kaspersky antivirus there is a serious vulnerability, can be turned into hacker attack tools-a vulnerability warning-the black bar safety net

! enSilo of security experts in numerous antivirus software and found a serious security vulnerability that the hackers exploited the vulnerability could put a virus into the hacker's attack tools, the affected antivirus software including AVG, McAfee, Kaspersky. The third large virus in the...

Kaspersky Total Security 'avp.exe' Authentication Bypass Vulnerability

Kaspersky Total Security is an all-encompassing multi-device version of antivirus software. A remote authentication bypass vulnerability exists in Kaspersky Total Security, which could be exploited by remote attackers to bypass authentication mechanisms and perform unauthorized operations...

[SYSS-2015-006] Kaspersky Total Security - Use of One-Way Hash withouth a Salt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-006 Product: Kaspersky Total Security KTS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.1.415 Tested Versions: 15.0.1.415 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution Status:...