SUPERAntiSpyware and SuperAdBlocker Multiple Vulnerabilities
BID:38645
Info
SUPERAntiSpyware and SuperAdBlocker Multiple Vulnerabilities
| Bugtraq ID: | 38645 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 10 2010 12:00AM |
| Updated: | Mar 10 2010 12:00AM |
| Credit: | Luka Milkovic |
| Vulnerable: |
SUPERAntiSpyware SUPERAntiSpyware 4.34.1000 SuperAdBlocker SuperAdBlocker 4.6.1000 |
| Not Vulnerable: | |
Discussion
SUPERAntiSpyware and SuperAdBlocker Multiple Vulnerabilities
SUPERAntiSpyware and Super Ad Blocker are prone to multiple local vulnerabilities, including:
- Multiple denial-of-service vulnerabilities
- Multiple local privilege-escalation vulnerabilities
- A security vulnerability that may allow attackers to read and write arbitrary files
- An information-disclosure vulnerability
An attacker can exploit these issues to gain elevated privileges on the affected computer, crash the affected computer, gain access to sensitive information, or overwrite arbitrary files. Other attacks are also possible.
SUPERAntiSpyware and Super Ad Blocker are prone to multiple local vulnerabilities, including:
- Multiple denial-of-service vulnerabilities
- Multiple local privilege-escalation vulnerabilities
- A security vulnerability that may allow attackers to read and write arbitrary files
- An information-disclosure vulnerability
An attacker can exploit these issues to gain elevated privileges on the affected computer, crash the affected computer, gain access to sensitive information, or overwrite arbitrary files. Other attacks are also possible.
Exploit / POC
SUPERAntiSpyware and SuperAdBlocker Multiple Vulnerabilities
The following exploit code is available:
The following exploit code is available:
Solution / Fix
SUPERAntiSpyware and SuperAdBlocker Multiple Vulnerabilities
Solution:
Reports indicate that the vendor has addressed these issues in SUPERAntiSpyware; Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reports indicate that the vendor has addressed these issues in SUPERAntiSpyware; Symantec has not confirmed this. Please contact the vendor for more information.
References
SUPERAntiSpyware and SuperAdBlocker Multiple Vulnerabilities
References:
References:
- Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker (Luka Milkovic)
- SuperAdBlocker Homepage (SuperAdBlocker)
- SuperAnitSpyware Homepage (SuperAntiSpyware)