Norman Virus Control - nvcoaft51.sys ioctl BF672028

Norman Virus Control - nvcoaft51.sys ioctl BF672028 / Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstract nvcoaft51.sys driver receive as parameter in some ioctl's a pointer to a KEVENT struct, calling KeSetEvent without any prior check. The device created by the driver NvcOa can b...

Norman Virus Control - 'nvcoaft51.sys' ioctl BF672028

/ Norman Virus Control nvcoaft51.sys ioctl BF672028 exploit Abstract nvcoaft51.sys driver receive as parameter in some ioctl's a pointer to a KEVENT struct, calling KeSetEvent without any prior check. The device created by the driver NvcOa can be opened by any user. As result, a user can send a...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

Design/Logic Flaw

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...

Design/Logic Flaw

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4577

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...

CVE-2007-4578

CVE-2007-4578 affects Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0. Vulnerability arises in handling of UPX-packed files due to an integer cast around, enabling a remote attacker to cause a crash (DoS) and, per some sources, potentially execute arbitrary code. Vendor note (as ...

CVE-2007-4577

CVE-2007-4577 affects Sophos Anti-Virus for Unix/Linux prior to 2.48.0. A malformed BZip file can trigger an infinite loop, causing the Engine to create multiple temporary files and leading to a denial-of-service condition. The issue is triggered during processing of compressed input (BZip) and a...

CVE-2007-4577

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...

CVE-2007-4578

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

Sophos Antivirus UPX及BZIP文件解析拒绝服务漏洞

BUGTRAQ ID: 25428 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos Anti-Virus在处理畸形格式的UPX和BZIP文件时存在漏洞，远程攻击者可能利用此漏洞导致应用程序不可用。 如果用户受骗打开了恶意的UPX压缩可执行文件或BZIP压缩文档的话，就可能触发死循环，导致引擎崩溃或临时文件耗尽所有磁盘空间。 Sophos Anti-Virus 2.48.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

Sophos Anti-Virus UPX and BZIP File Multiple Vulnerabilities

The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'UPX' and 'BZIP' files. If a remote attacker can cause a malicious file to be scanned by the affected application, these issues could be leveraged to crash the affected...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

Authentication flaw

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4242

CVE-2007-4242 affects the Pop3 Proxy in Astaro Security Gateway (ASG) 7 . The issue is that attachments exceeding the maximum allowed size are not scanned for viruses and are passed through, enabling a bypass of virus scanning. The connected documents confirm the affected component and the root c...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

Design/Logic Flaw

arclib.dll before 7.3.0.9 in CA Anti-Virus formerly eTrust Antivirus 8 and certain other CA products allows remote attackers to cause a denial of service infinite loop and loss of antivirus functionality via an invalid "previous listing chunk number" field in a CHM file...

CVE-2007-3875

arclib.dll before 7.3.0.9 in CA Anti-Virus formerly eTrust Antivirus 8 and certain other CA products allows remote attackers to cause a denial of service infinite loop and loss of antivirus functionality via an invalid "previous listing chunk number" field in a CHM file...

CVE-2007-3875

CVE-2007-3875 : A DoS in CA/ eTrust Antivirus products caused by arclib.dll when processing a malformed CHM file. An invalid “previous listing chunk number” in CHM triggers an infinite loop, halting antivirus functionality. Affected CA products include CA Anti-Virus for the Enterprise (formerly e...