CVE-2008-3177

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...

CVE-2008-3177

The CVE-2008-3177 entry describes the Sophos virus detection engine 2.75 on Linux/Unix (as used in Sophos Email Appliance, Pure Message for Unix, and the Sophos Anti-Virus Interface). The vulnerability is a denial of service caused by processing zero-length MIME attachments, enabling remote attac...

CVE-2008-3177

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...

Sophos产品MIME附件处理拒绝服务漏洞

BUGTRAQ ID: 30110 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos杀毒软件处理畸形的数据时存在漏洞，如果用户使用Sophos杀毒软件扫描了0字节的MIME附件的话，就会导致应用程序意外终止。 Sophos Anti-Virus Sophos Pure Message for Unix Sophos Email Appliance Sophos ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

2 0 0 8 all the active Defense of ideas-vulnerability warning-the black bar safety net

| Hello everyone, I'm a sailor, and talked about soft kill active Defense, but this year a hot topic, mostly what modify time is too Kabbah take the initiative and restore SSDT table topics like, now to modify the time through the Kabbah take the initiative on the new version of the card bar has ...

Stack overflow

Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call...

CVE-2008-1518

CVE-2008-1518 describes a local privilege escalation in Kaspersky Lab products. The vulnerable component is the kernel driver kl1.sys used by Kaspersky Anti-Virus 6.0/7.0 and Internet Security 6.0/7.0. The issue is a stack-based buffer overflow triggered in the handling of IOCTL 0x800520e8 due to...

Kaspersky Multiple Products kl1.sys Driver Local Overflow

The version of the Kaspersky product installed on the remote host contains a stack-based overflow in its 'kl1.sys' kernel driver involving its handling of IOCTL 0x800520e8. A local attacker may be able to leverage this issue to gain complete control of the affected system. C Tenable Network...

Update Protection Against Computer Associates (CA) Product Alert Notifications Server Multiple Buffer Overflow Vulnerabilities

Several buffer overflow vulnerabilities have been identified in CA Product Alert Notification Service Alert.exe that could allow a remote attacker to execute arbitrary code or cause a Denial of Service in several versions of CA Anti-Virus for Enterprise, CA Threat Manager for Enterprise and CA...

Unfixed XSS vulnerability at www.virus-radar.com

Security researcher C1c4Tr1Z, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.virus-radar.com, which at the time of submission ranked 277017 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is...

Virus Security heap overflow vulnerability

Overview SourceNext Virus Security has a problem in the email processing. It is affected by a heap overflow vulnerability when receiving specially crafted emails. Impact A remote attacker may cause a denial of service and execute arbitrary code with the Local System privilege. Solution None...

Virus Security memory leak vulnerability

Overview SourceNext Virus Security has a problem in processing a specially crafted email. When the email has a virus as an attachment and Virus Security detects that virus, memory leak occurs. Impact A remote attacker may conduct a denial of service DoS attack. Solution None...

Virus Buster Corporate Edition vulnerability

Overview Virus Buster Corporate Edition contains a vulnerability which may allow an attacker to view the OPP.ini file Outbreak Prevent Policy configuration file, when a specific URL is entered to the management console. Impact An attacker could distrubute viruses that sneak through the policy by...

[SECURITY] Fedora 9 Update: clamav-0.93-1.fc9

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Code injection

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service reboot with the product disabled and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateK...

CVE-2008-1737

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service reboot with the product disabled and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateK...

Sophos Anti-Virus SSDT钩子本地拒绝服务漏洞

BUGTRAQ ID: 28743 CVECAN ID: CVE-2008-1737 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos杀毒软件的NtCreateKey函数没有正确地验证参数，本地攻击者可能利用此漏洞导致程序不可用。 相关的代码如下： /----------- int cdecl NtCreateKeyHookPHANDLE pKeyHandle, ACCESSMASK DesiredAccess, POBJECTATTRIBUTES ObjectAttributes, ULONG TitleIndex,PUNICODESTRING...

CVE-2008-1737

CVE-2008-1737 corresponds to multiple antivirus/anti‑virus SSDT-hook vulnerabilities, notably Sophos Anti‑Virus 7.x with Runtime Behavioural Analysis. The technical description in the connected docs shows insufficient argument validation in hooked SSDT functions (NtCreateKey, NtOpenProcess, NtDel...

CVE-2008-1737

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service reboot with the product disabled and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateK...

[SECURITY] Fedora 7 Update: clamav-0.92.1-2.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...