CVE-2002-2397

The CVE-2002-2397 entry concerns Sygate Personal Firewall 5.0, where a remote attacker could bypass firewall filters by spoofing the source IP to 127.0.0.1 or the 127.0.0.0 network. The connected records reiterate the same description (product/version and bypass via spoofed loopback addresses) bu...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 is affected. The flaw arises from relying on the Process Environment Block (PEB) to identify a process, allowing local attackers to bypass product controls by spoofing the PEB fields (ImagePathName, CommandLine, and WindowTitle). The connected documents confirm t...

CVE-2006-6622

Soft4Ever Look 'n' Stop (LnS) 2.05p2 (pre-20061215) is affected. The flaw arises because LnS relies on the Process Environment Block (PEB) to identify a target process, enabling local attackers to spoof PEB fields (ImagePathName, CommandLine, WindowTitle) and bypass the software’s process control...

CVE-2006-6618

The CVE-2006-6618 entry concerns AntiHook 3.0.0.23, where the Desktop component relies on the Process Environment Block (PEB) to identify a target process. The vulnerability arises because an attacker can spoof PEB fields (ImagePathName, CommandLine, and WindowTitle), enabling local privilege con...

CVE-2006-6620

CVE-2006-6620 affects Comodo Personal Firewall 2.3.6.81, which relies on the Process Environment Block (PEB) to identify a process. This allows local users to bypass the product’s controls on a process by spoofing the PEB fields (ImagePathName, CommandLine, WindowTitle). The provided documents do...

CVE-2006-6621

The CVE-2006-6621 entry concerns Filseclab Personal Firewall 3.0.0.8686, which relies on the Process Environment Block (PEB) to identify a process. The root cause is spoofing of PEB fields (ImagePathName, CommandLine, WindowTitle), enabling local users to bypass the product’s controls on a proces...

CVE-2010-2305

The CVE-2010-2305 issue affects Symantec Sygate Personal Firewall 5.6 (build 2808). A flaw exists in the SSHelper.dll ActiveX control where a buffer overflow is triggered by passing a long third argument to the SetRegString method, allowing remote code execution. The vulnerability is tied to an A...

CVE-2006-6619

CVE-2006-6619 affects AVG Anti-Virus plus Firewall 7.5.431. The vulnerability arises from the product using the Process Environment Block (PEB) to identify a process, allowing a local attacker to bypass the product’s controls by spoofing the PEB fields: ImagePathName, CommandLine, and WindowTitle...