VMSA-2019-0007:VMware Workstation update addresses a DLL-hijacking issue

VMware Security Advisories Advisory ID| VMSA-2019-0007 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.0 Synopsis| VMware Workstation update addresses a DLL-hijacking issue CVE-2019-5526 Issue Date| 2019-05-14 Updated On| 2019-05-14 Initial Advisory CVEs| CVE-2019-5526 1. Impacted Products...

schneider SoMove suffers from a dll hijacking vulnerability

schneider SoMove is a servo inverter soft start PC commissioning software. A dll hijacking vulnerability exists in schneider SoMove. An attacker can load a malicious dll and execute malicious code...

wecon LeviStudio suffers from dll hijacking vulnerability

Ltd. is a high-tech company specializing in the research, development and sales of products in the field of automation. wecon LeviStudio has a dll hijacking vulnerability that can be exploited by attackers to gain device privileges...

InduSoft Web Studio IMHOST32 suffers from dll hijacking vulnerability

InduSoft Web Studio is a popular automation integration development software. A dll hijacking vulnerability exists in InduSoft Web Studio IMHOST32, which can be exploited by attackers to execute malicious code...

LSIS KGL_WIN local suffers from dll hijacking vulnerability

LS Industrial Electronics is a company that mainly deals with programmable controllers, frequency converter speed controllers, DC motor speed controllers, uninterruptible power supplies, high-voltage electrical appliances, low-voltage electrical appliances, and power electronic equipment. A dll...

SAMSoar Developer suffers from dll hijacking vulnerability

Shenzhen Xianzhong Technology is a national high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. SAMSoar Developer has a dll hijacking vulnerability when processing ssp files, which can be exploited by attackers to load...

SoMachine HVAC suffers from dll hijacking vulnerability

SoMachine HVAC is PLC programming software. SoMachine HVAC suffers from a dll hijacking vulnerability when processing ppjs, ppjx files, which can be exploited by an attacker to load a malicious dll and execute malicious code...

PortSwigger Web Security: DLL Hijacking in Burp Suite Pro 2.0.19 Installer

I've found that the latest installer of Burp Suite Pro tries to load some DLLs from an unprotected folder. After providing it with admin privileges required to install it tries to load these DLLs: C:\Users\bortto\AppData\Local\Temp\e4jA5E5.tmpdir1553882416\jre\bin\WINMM.dll...

VMware Workstation 14.1.5 / VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation

VMware: Host VMX Process Impersonation Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15.0.2. Class: Elevation of Privilege Summary: The creation of the VMX process on a Windows host can be hijacked leading to elevation of privilege. Description:...

CVE-2018-18913

Opera before 57.0.3098.106 is affected by a DLL Search Order Hijacking vulnerability (CVE-2018-18913). An attacker can craft a ZIP containing an HTML page and a malicious DLL; when the document is opened, Opera searches for shcore.dll and dcomp.dll in the system directory, enabling the attacker t...

Siemens Wincc v7.2 suffers from dll hijacking vulnerability

Siemens Wincc v7.2 is a process monitoring system. Siemens Wincc v7.2 suffers from a dll hijacking vulnerability that can be exploited by an attacker to execute arbitrary code...

NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution Exploit

BEopt suffers from a DLL Hijacking issue. The vulnerability is caused due to the application loading libraries sdl2.dll and libegl.dll in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into opening a related application file .BEopt located on a remote...

NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution

/ NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution Vendor: NREL Product web page: https://beopt.nrel.gov Affected version: 2.8.0.0, 2.7.0.0 and 2.6.0.1 Summary: The BEoptaC/ Building Energy Optimization Tool software provides capabilities to evaluate residential building designs...

NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution

Summary The BEopt™ Building Energy Optimization Tool software provides capabilities to evaluate residential building designs and identify cost-optimal efficiency packages at various levels of whole-house energy savings along the path to zero net energy. Description BEopt suffers from a DLL...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

Code injection

DISPUTED DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker'...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

CVE-2019-9116

CVE-2019-9116 affects Sublime Text 3 (32‑bit Windows) 3.1.1 build 3176. A DLL hijack is possible if a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll is loaded when opening a .txt from an attacker-controlled %LOCALAPPDATA%\Temp\sublime_text. The vendor at...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...

PT-2019-19370 · Sublime Text · Sublime Text

Name of the Vulnerable Software and Affected Versions: Sublime Text 3 version 3.1.1 build 3176 Description: DLL hijacking is possible because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublime text.exe to open a...