CVE-2017-15913

The Installer in Whale allows DLL hijacking...

CVE-2017-15913

The CVE-2017-15913 entry concerns Whale’s Installer, where the Installer module is susceptible to DLL hijacking. The affected component is the Whale Installer, and the root cause is a DLL search-order hijack during installation. According to NVD, the CVSS3 base score is 7.8 ( HIGH ) with LOCAL at...

Fortinet Installer Client 5.6 DLL Hijacking

Affected Product: Fortinet Installer Client 5.6 for Windows PC Credit: Souhardya Sardar and Rohit Bankoti Contact : github.com/Souhardya Summary: Fortinet Installer contains a privilege escalation vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the...

Spoofing

A DLL Hijacking vulnerability in QNAP Qsync for Windows exe version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines...

CVE-2017-13070

A DLL Hijacking vulnerability in QNAP Qsync for Windows exe version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines...

CVE-2017-13070

A DLL Hijacking vulnerability in QNAP Qsync for Windows exe version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines...

CVE-2017-13070

The provided documents confirm a DLL hijacking vulnerability in QNAP Qsync for Windows (exe) versions 4.2.2.0724 and earlier, where an attacker could remotely execute arbitrary code on Windows machines. Affected component: QNAP Qsync for Windows. Root cause: DLL hijacking vulnerability. Impact: r...

Amazon Audible DLL Hijacking

Aloha, Introduction: Vendor: Amazon Affected Product: Audible Software for Windows PC Fixed in: Latest Version released by the vendor Vendor Website: https://www.audible.com/ Vulnerability Type: Privilege Escalation CVE: CVE-2017-17069 Credit: Himanshu Mehta @LionHeartRoxx Summary: Audible contai...

CVE-2017-8137

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

Design/Logic Flaw

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

CVE-2017-8137

Huawei HedEx (HedEx Lite) prior to V200R006C00 suffers a DLL hijacking vulnerability caused by calling a DLL via a relative path. The issue enables tampering with the DLL file and is described for HedEx products in CVE-2017-8137. Affected versions are earlier than V200R006C00; Huawei’s advisory r...

VMware Workstation DLL Hijacking Vulnerability

VMWare Workstation is a suite of desktop virtualization software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. installer is one of the installation programs. A DLL hijacking vulnerability exists in the installer ...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

Code injection

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-4939

CVE-2017-4939 is a DLL hijacking vulnerability in the VMware Workstation installer for 12.x, prior to 12.5.8. The issue arises from improper DLL loading, enabling an attacker to load a DLL of their choosing and potentially execute arbitrary code. Connected advisories also detail related issues (e...

CVE-2017-12312

An untrusted search path aka DLL Preloading vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory wher...

CVE-2017-12312

An untrusted search path aka DLL Preloading vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory wher...

CVE-2017-12313

An untrusted search path aka DLL Preload vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working director...

Input validation

An untrusted search path aka DLL Preloading vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory wher...