Adobe Illustrator DLL Hijacking Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms, which can be exploited by attackers to elevate privileges...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

Directory traversal

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking: it loads jansi.dll from the current working directory, enabling potential arbitrary-code execution when a crafted file is used. Affected product: Ghidra (open-source reverse engineering tool) prior to version 9.0.2. Root cause: loading jansi...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

Keybase: Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature

Summary I've tested this vulnerability on Windows 10, with last keybase client. If a user click on "Download file" during a chat, an attacker can write files anywhere in userland. When downloading a file from a chat, the file should always be written in "Downloads" folder. Proof of concept You ne...

HP Touchpoint Analytics Opens PCs to Code Execution Attack

A security flaw, discovered in an open-source software program that is a key component of HP’s TouchPoint Analytics service, is opening up a wide swath of HP computers to attack. The vulnerability, if exploited by local attackers with administrative privileges, can allow them to execute arbitrary...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

Design/Logic Flaw

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

CVE-2019-16407

Summary of CVE-2019-16407 (JetBrains ReSharper DLL Hijacking) : A DLL hijacking vulnerability affected JetBrains ReSharper installers for versions prior to 2019.2. The Red Hat/CNVD/NVD entries corroborate a DLL hijacking issue in the ReSharper installer, with security bulletin Q2-2019 noting the ...

Razer: DLL Hijacking in Synapse 2 CrashSender1402.exe via version.dll

The tester determined that the Synapse 2 installed executable CrashSender1402.exe was subject to a DLL hijacking vulnerability. As this was no longer supported by the third party provider, Razer decided to remove this executable from future versions of Synapse 2...

Corel DVD MovieFactory suffers from dll hijacking vulnerability

Corel DVD MovieFactory is a dvd disc burning conversion tool. Corel DVD MovieFactory suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Corel PaintShop Pro 2020 suffers from dll hijacking vulnerability

Corel is a manufacturer specializing in digital multimedia applications. Corel PaintShop Pro 2020 suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

CVE-2019-8076

The CVE-2019-8076 entry concerns Adobe Application Manager (AAM) installer version 10.0 with an Insecure Library Loading (DLL hijacking) vulnerability that could allow Arbitrary Code Execution in the current user context. Multiple sources corroborate that the flaw is located in the AAM installer ...

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

Adobe Releases Security Patches For Critical Flash Player Vulnerabilities

It's Patch Tuesday again—the day of the month when both Adobe and Microsoft release security patches for vulnerabilities in their software. Adobe has just released its monthly security updates to address a total of 3 security vulnerabilities in only two of its products this time—Adobe Flash Playe...

cad mini home improvement suffers from dll hijacking vulnerability (CNVD-2019-33722)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad mini home decoration CNVD-C-2019-128671. An attacker can exploit the vulnerability to...