Bitdefender Antivirus Free Edition DLL Hijacking

Aloha, AntivirusFreeEditionx64.exe loads and executes dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...

CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

CVE-2015-2720

The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might allow local users to gain privileges via a Trojan horse file...

Mozilla Firefox 'updater.exe' Process Elevation of Privilege Vulnerability

Mozilla Firefox is a popular open source WEB browser. A vulnerability in Mozilla Firefox's handling of the 'updater.exe' process allows an attacker to elevate privileges by running the process from another directory instead of the application directory...

Photodex ProShow Producer 5.0.3256 - Buffer Overflow

Inshell Security Advisory http://www.inshell.net/ 1. ADVISORY INFORMATION ----------------------- Product: Photodex ProShow Producer Vendor URL: www.photodex.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2012-06-06 Date published: 2012-07-02 CVSSv2 Score: 6,9 AV:L/AC:M/Au:N/C:C/I:C/A:...

CVE-2012-1943

Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allows local users to gain privileges via a Trojan horse wsock32.dll file in an application directory...

CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...