| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
| Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00254) | 15 Jan 201600:00 | – | cnvd | |
| Microsoft Windows DLL Loading Elevation of Privilege (MS16-007: CVE-2016-0014) | 12 Jan 201600:00 | – | checkpoint_advisories | |
| CVE-2016-0014 | 13 Jan 201602:00 | – | cvelist | |
| EUVD-2016-0053 | 7 Oct 202500:30 | – | euvd | |
| MS16-007: Security Update for Microsoft Windows to Address Remote Code Execution: January 12, 2016 | 12 Jan 201600:00 | – | mskb | |
| KLA10735 Multiple vulnerabilities in Microsoft Windows | 12 Jan 201600:00 | – | kaspersky | |
| CVE-2016-0014 | 13 Jan 201605:59 | – | nvd | |
| Microsoft Windows Multiple Vulnerabilities (3124901) | 13 Jan 201600:00 | – | openvas | |
| Microsoft IExpress DLL Hijacking | 13 Jan 201600:00 | – | packetstorm | |
| WiX Toolset DLL Hijacking | 21 Jan 201600:00 | – | packetstorm |
| Source | Link |
|---|---|
| securitytracker | www.securitytracker.com/id/1034661 |
| docs | www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| SENTINEL.DLL | path | home.arcor.de/skanthak/sentinel.html | POC host page used to deliver malicious DLL for DLL loading vulnerability. | CWE-426 |
| FEClient.dll | path | home.arcor.de/skanthak/sentinel.html | POC host page used to deliver malicious DLL for DLL loading vulnerability. | CWE-426 |
| MSI.dll | path | home.arcor.de/skanthak/sentinel.html | POC host page used to deliver malicious DLL for DLL loading vulnerability. | CWE-426 |
| Version.dll | path | home.arcor.de/skanthak/sentinel.html | POC host page used to deliver malicious DLL for DLL loading vulnerability. | CWE-426 |
| CLbCatQ.dll | path | home.arcor.de/skanthak/sentinel.html | POC host page used to deliver malicious DLL for DLL loading vulnerability. | CWE-426 |
| FEClient.dll | path | home.arcor.de/skanthak/download/SENTINEL.DLL | DLL delivered as part of PoC to be placed in Windows Downloads to enable DLL search order hijacking. | CWE-426 |
| Intel Driver Update Utility Installer.exe | path | downloadmirror.intel.com/24345/a08/Intel%20Driver%20Update%20Utility%20Installer.exe | PoC executable installer used to trigger DLL loading from application directory. | CWE-426 |
| Intel Driver Update Utility Installer.exe | path | www.intel.com/p/de_DE/support/detect | Source for the PoC installer used in the demonstrated attack vector. | CWE-426 |
| Intel Driver Update Utility | path | downloadcenter.intel.com/download/24345/Intel-Driver-Update-Utility | Official download page associated with the PoC software used to exploit DLL loading vulnerability. | CWE-426 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation