EUVD-2010-5193

Malware in sbrugna...

CVE-2010-5234

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

Camtasia Studio 4.0.2 'csPreloader' Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27107/info Camtasia Studio is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to compromise the applicatio...

CVE-2010-5234

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

CVE-2010-5234

CVE-2010-5234 affects Camtasia Studio 7.0.1 build 57. The issue is an untrusted search path/ DLL hijacking vulnerability: local users can gain privileges by placing (1) MFC90ENU.DLL or (2) MFC90LOC.DLL in the current working directory, demonstrated via a directory containing a .cmmp or .camrec fi...

CVE-2010-5234

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

PT-2012-1444

Name of the Vulnerable Software and Affected Versions Camtasia Studio version 7.0.1 build 57 Description The issue allows local users to gain privileges via a Trojan horse MFC90ENU.DLL or MFC90LOC.DLL file in the current working directory. This can be demonstrated by a directory that contains a...

KLA10099 LPE vulnerability in Camtasia Studio

An untrusted path vulnerability was found in Camtasia Studio. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking. Original advisories - Exploitation Related products Camtasia-Studio CVE list CVE-2010-5234 high Soluti...

CVE-2010-5234: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

Camtasia Studio v7.0.x - Denial of Service Vulnerability

Document Title: =============== Camtasia Studio v7.0.x - Denial of Service Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 158 Product & Service Introduction: =============================== Camtasia Studio ist ein...

Camtasia Studio v7.0.x - Denial of Service Vulnerability

Document Title: =============== Camtasia Studio v7.0.x - Denial of Service Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 158 Product & Service Introduction: =============================== Camtasia Studio ist ein...

Camtasia Studio 7 (mfc90enu.dll, mfc90loc.dll) DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================================================== Camtasia Studio 7 mfc90enu.dll, mfc90loc.dll DLL Hijacking Exploit ====================================================================...

CVE-2008-6061

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter...

CVE-2008-6061

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter...

CVE-2008-6061

CVE-2008-6061 affects TechSmith Camtasia Studio

CVE-2008-6061: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter...

Camtasia Studio Pre-generated SWF File csPreloader Parameter Unspecified Arbitrary Code Execution

Camtasia Studio, an application for recording videos, is installed on the remote host. The version of Camtasia Studio on the remote host reportedly generates Flash SWF files that themselves allow loading of an arbitrary Flash file via the 'csPreloader' parameter, which could lead to cross-site...

Camtasia Studio 4.0.2 - csPreloader Remote Code Execution

Camtasia Studio 4.0.2 - csPreloader Remote Code Execution source: https://www.securityfocus.com/bid/27107/info Camtasia Studio is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to...