CVE-2023-29487

CVE-2023-29487 affects Heimdal Thor agent: Windows ≤3.4.2 and macOS ≤2.6.9. The root cause is the Threat To Process Correlation module lacking origin-process information in DNS logs, which is interpreted as a DoS. The documented impact is a denial of service, with no public exploit details provid...

CVE-2023-29486

The CVE-2023-29486 entry concerns Heimdal Thor agent for Windows, affected in versions 3.4.2 and earlier than 3.7.0. The issue allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via the Next-Gen Antivirus component. Red Hat and Ubuntu ecos...

CVE-2019-8351

CVE-2019-8351 affects Heimdal Thor Agent 2.5.17x prior to 2.5.173, where the product does not validate X.509 certificates from TLS servers. This allows remote attackers to impersonate legitimate servers and potentially obtain sensitive data via a forged certificate. The NVD entry documents a high...

CVE-2023-29485

CVE-2023-29485 affects Heimdal Thor agent: Windows 3.4.2 and earlier; macOS 2.6.9 and earlier. The issue allows bypassing network filtering, arbitrary code execution, and data exposure via the DarkLayer Guard threat prevention module. The vendor disputes the issue, arguing DNS traffic is filtered...