Microsoft Windows COM CVE-2019-0552 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windo...

KB4480978: Windows 10 Version 1709 and Windows Server Version 1709 January 2019 Security Update

The remote Windows host is missing security update 4480978. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who successfully exploited this vulnerability...

Microsoft Windows COM Elevation of Privilege (CVE-2019-0552)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2018-0552

Untrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome edition for Windows Ver. 5.1.26 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0552

Untrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome edition for Windows Ver. 5.1.26 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0552

CVE-2018-0552 concerns the Windows installer for PhishWall Client Firefox/Chrome Edition (Ver. 5.1.26 and earlier). The issue is an insecure DLL search path (CWE-427) that can allow arbitrary code execution with the user’s privileges via a Trojan horse DLL loaded from an unspecified directory. Do...

CVE-2017-0552

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0552

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0552

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0552

CVE-2017-0552 affects Android Mediaserver (libavc). A remote attacker could craft a file to trigger a denial of service, causing a device hang or reboot. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1. The initial description and connected sources identify the issue as a remote DoS in Mediaser...

CVE-2016-0552

Technical details (affected products, components, vulnerable versions, impact, and remediation) for CVE-2016-0552 are not provided in the supplied documents. Monitor for updates from trusted sources.

CVE-2016-0552

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545,...

Gentoo Security Advisory GLSA 201409-05

Gentoo Linux Local Security Checks GLSA 201409-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Fedora Update for gcab FEDORA-2015-0264

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : gcab-0.4-7.fc21 (2015-0264)

Security fix for CVE-2015-0552 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

CVE-2015-0552

The CVE-2015-0552 issue affects the gcab project (gcab 0.4) via the function gcab_folder_extract in libgcab/gcab-folder.c, enabling a directory traversal that allows remote attackers to write to arbitrary files in a crafted CAB file (example path). The root cause is a path handling flaw in direct...

openSUSE Security Update : gcab (openSUSE-SU-2015:0043-1)

This update fixes the following security issue : - CVE-2015-0552: Avoid path traversal boo911814, bgo742331, CVE-2015-0552. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-13. Th...

MGASA-2015-0018 Updated gcab packages fix CVE-2015-0552

Updated gcab packages fix security vulnerability: Jakub Wilk reported a directory traversal vulnerability due to gcab not filtering leading slashes from paths in CAB files CVE-2015-0552...