CVE-2007-3875

arclib.dll before 7.3.0.9 in CA Anti-Virus formerly eTrust Antivirus 8 and certain other CA products allows remote attackers to cause a denial of service infinite loop and loss of antivirus functionality via an invalid "previous listing chunk number" field in a CHM file...

Norman Virus Control LZH及.ACE文件解析缓冲区溢出漏洞

BUGTRAQ ID: 25003,25015 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control的文件解析引擎没有正确的解析.LZH和.ACE文件，如果用户受骗打开了畸形的.LZH或.ACE文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意指令。 Norman Virus Control = 5.90 Norman ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.norman.com/...

Norman Virus Control DOC文件解析拒绝服务漏洞

BUGTRAQ ID: 25014 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control在处理畸形格式的.DOC文件时存在漏洞，远程攻击者可能利用此漏洞导致程序不可用。 Norman Virus Control的文件解析引擎没有正确地解析.DOC OLE2文件，在解析计算时可能错误地将0用作除数，导致无法处理的异常，应用程序可能会崩溃。 Norman Virus Control = 5.90 Norman ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.norman.com/...

CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

Design/Logic Flaw

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

CVE-2007-3906

Mode C: CVE-2007-3906 affects Kaspersky Anti-Virus for Check Point FireWall-1. The vulnerability (unspecified vectors) may cause a denial-of-service kernel hang in all affected installs prior to Critical Fix 1 (version 5.5.161.0). Impact is partial availability; attacker role is not clearly defin...

CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

Kaspersky Anti-Virus 5.5 for Check Point Firewall-1拒绝服务漏洞

Kaspersky Anti-Virus是一款反防毒解决方案。 Kaspersky Anti-Virus 5.5 for Check Point Firewall-1存在未明安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Kaspersky Anti-Virus for Check Point Firewall-1 5.5 可参考如下安全公告获得补丁信息； http://support.kaspersky.com/checkpoint?qid=208279464...

Kaspersky Anti-Virus for Check Point FireWall-1 Unspecified DoS

The version of Kaspersky Anti-Virus for Check Point FireWall-1 installed on the remote host suffers from an as-yet unspecified issue in which the antivirus kernel may freeze. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25710; scriptversion"1.19"; scriptcvsdate"Dat...

Code injection

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic...

CVE-2007-3777

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic...

CVE-2007-3777

CVE-2007-3777 affects AVG Anti-Virus versions with avg7core.sys (7.5.444, 7.5.446, 7.5.448). An internal function in avg7core.sys copies data to an arbitrary address via the IOCTL 0x5348E004 on the generic DeviceIoControl handler, enabling a local privilege escalation by providing arbitrary addre...

AVG Anti-Virus本地特权提升漏洞

AVG Anti-Virus是一款反病毒应用程序。 AVG Anti-Virus不正确限制非特权用户写数据到内核内存，本地攻击者可以利用漏洞提升特权。 AVG Anti-Virus提供的服务驱动avg7core.sys存在问题，允许非特权用户写任意数据到任意地址。此驱动在它的通用DeviceIoControl处理器中支持两个IOCTLs，其中IOCTLs 0x5348E004用于获得核心驱动对用户模式组件上执行特权函数，由于设计错误，在没有进行任何检查就拷贝任意数据到用户模式应用程序提供的地址中。 AVG AVG Anti-Virus Free Edition 7.5.446 AVG A...

AVG Anti-virus avg7core.sys 0x5348E004 IOCTL Local Privilege Escalation

AVG Anti-Virus is installed on the remote Windows host. The version of AVG Anti-Virus on the remote host includes a kernel mode service driver, avg7core.sys, that allows a local user to write arbitrary data to arbitrary addresses. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Trend Micro ServerProtect SpntSvc.exe CreateBinding buffer overflow

Added: 07/09/2007 CVE: CVE-2007-2508 BID: 23868 OSVDB: 35790 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the SpntSvc.exe daemon which listens for connections on port 5168/TCP. Problem A buffer overflow vulnerability in the CAgRpcClient::CreateBinding function ...

Unmasked virus how to turn off antivirus and security products-vulnerability warning-the black bar safety net

1, the kill rising software: at the command line please use ntsd –c-q-p PID 或者 使用 c:/pskill.exe ravmon command to kill rising software. 2, on Norton Enterprise Edition“automatic File Protection“of the close method: Close the service: net stop "Symantec AntiVirus" closed successful. Closing proces...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253

The CVE-2007-3253 entry relates to Astaro Security Gateway (ASG) prior to 7.005. The documented issues are three DoS vectors: (1) email path triggering the SMTP Proxy to stop during scanning, (2) HTTP traffic causing the HTTP proxy to stop or slow during responses that include virus-scanned pages...

CA Products Anti-Virus Engine CAB File Handling Vulnerabilities (CVE-2007-2863, CVE-2007-2864)

...

Symantec Web Security Detection

The remote web server appears to be running Symantec Web Security, for filtering traffic of viruses and inappropriate content. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25445; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...