DLL Hijacking Vulnerability in Desktop Version of 2345 Movie Book

The desktop version of 2345 Movie & TV is a video software promoted by Shanghai 2,3,4,5 Network Technology Co. There is a DLL hijacking vulnerability in the desktop version of 2345 Movie & TV, which can be exploited by an attacker to load a malicious dll and execute malicious code...

CVE-2019-5539

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

Design/Logic Flaw

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

CVE-2019-5539

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

CVE-2019-5539

CVE-2019-5539 describes a DLL hijacking flaw in Cortado Thinprint affecting VMware Workstation (15.x before 15.5.1) and Horizon View Agent (7.x before 7.5.4, 7.10.x before 7.10.1). The insecure DLL loading may allow a local attacker with normal user privileges to escalate to administrator on Wind...

VMware Workstation and VMware Horizon View Agent DLL Hijacking Vulnerability

VMware Workstation and VMware Horizon View Agent are both products of VMware, Inc.VMware Workstation is a suite of virtual machine software. VMware Workstation is a suite of virtual machine software that provides the ability to run multiple virtual machines with different operating systems at the...

CVE-2019-18670

In the Quick Access Service QAAdminAgent.exe in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability...

CVE-2019-18670

In the Quick Access Service QAAdminAgent.exe in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability...

Design/Logic Flaw

In the Quick Access Service QAAdminAgent.exe in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability...

CVE-2019-18670

In the Quick Access Service QAAdminAgent.exe in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability...

CVE-2019-18670

CVE-2019-18670 describes a DLL hijacking vulnerability in Acer Quick Access. The affected component is the Quick Access Service (QAAdminAgent.exe) used by Acer Quick Access, with affected versions V2.01.3000–V2.01.3027 and V3.00.3000–V3.00.3008. The root cause is an uncontrolled search path eleme...

Jira on Windows was vulnerable to DLL hijacking - CVE-2019-20400

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental variable can inject code into via a DLL hijacking vulnerability. h3. Acknowledgment We would like to thank Peleg Hadar of SafeBreach Labs for...

Jira on Windows was vulnerable to DLL hijacking - CVE-2019-20400

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental variable can inject code into via a DLL hijacking vulnerability. h3. Acknowledgment We would like to thank Peleg Hadar of SafeBreach Labs for...

VMSA-2019-0023:VMware Workstation and Horizon View Agent updates address a DLL-hijacking issue

VMware Security Advisories Advisory ID| VMSA-2019-0023 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.3 Synopsis| VMware Workstation and Horizon View Agent updates address a DLL-hijacking issue CVE-2019-5539 Issue Date| 2019-12-20 Updated On| 2019-12-20 Initial Advisory CVEs| CVE-2019-5539 1...

Microsoft Teams Instant Messenger DLL Hijacking

Microsoft Teams Instant Messenger application on Windows 7 SP1 fully patched is vulnerable to remote DLL loading / hijacking because : a The OS does not ship with the affected libraryies b The Teams application does not provide the libraryies So, it performs a search according to the 'PATH'...

CVE-2019-19364

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe version 1.1.0.21 and CatalystBrowseSuite.2019.1.exe version 1.1.0.21 installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current...

CVE-2019-19364

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe version 1.1.0.21 and CatalystBrowseSuite.2019.1.exe version 1.1.0.21 installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current...

Code injection

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe version 1.1.0.21 and CatalystBrowseSuite.2019.1.exe version 1.1.0.21 installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current...

CVE-2019-19364

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe version 1.1.0.21 and CatalystBrowseSuite.2019.1.exe version 1.1.0.21 installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current...

CVE-2019-19364

The CVE-2019-19364 entry concerns Sony Catalyst Production Suite 2019.1 (1.1.0.21) and Catalyst Browse 2019.1 (1.1.0.21). The vulnerability is a DLL hijacking flaw in the installers, which load DLLs that do not exist from the current directory, enabling a weak malicious user to escalate privilege...