Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/28744 | vdb entry |
http://securityreason.com/securityalert/3838 | third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/42084 | vdb entry |
http://www.coresecurity.com/?action=item&id=2249 | |
http://www.vupen.com/english/advisories/2008/1382 | vdb entry |
http://secunia.com/advisories/30007 | third party advisory vendor advisory |
http://www.securityfocus.com/archive/1/491405/100/0/threaded | mailing list |
http://securitytracker.com/id?1019946 | vdb entry |