Secunia

Tri Huynh has discovered two vulnerabilities in Prevx Pro 2005, which can be exploit to bypass security features provided by the product.

1) Incorrect handling of memory mapped files allows protected files that are mapped into memory using "MapViewOfFile()" to be written. This can be exploited to bypass the product's file protection security feature.

2) The driver does not validate the sender of received device I/O control codes. This allows a user-space program to bypass the product's security features by sending specific I/O control codes to the driver.

The vulnerabilities have been confirmed in version 1.0. Other versions may also be affected.

Solution
Do not run untrusted programs.
Further details available in Customer Area

Provided and/or discovered by
Tri Huynh

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area