Skype DLL Hijacking

Hi, There are a dll planting vuln in skype installer. This vuln had been reported to Microsoft but they decided not fix this. Here is the vulnerability details: ------ Skype installer in Windows is open to DLL hijacking. Skype looks for a specific DLL by dynamically going through a set of...

3GP Player 4.7.0 - DLL Hijacking Vulnerability

Document Title: =============== 3GP Player 4.7.0 - DLL Hijacking Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1955 Release Date: ============= 2016-09-23 Vulnerability Laboratory ID VL-ID: ==================================== 1955 Commo...

VMSA-2016-0014 : VMware ESXi, Workstation, Fusion, & Tools updates address multiple security issues

a. VMware Workstation heap-based buffer overflow vulnerabilities via Cortado ThinPrint VMware Workstation contains vulnerabilities that may allow a windows -based virtual machine VM to trigger heap-based buffer overflows in the windows-based hypervisor running VMware workstation that the VM resid...

WhatsApp DLL Hijacking

Exploit Title: WhatsApp DLL Hijacking Date: 8-9-2016 Author: Ashiyane Digital Security Team Vendor Homepage:https://www.whatsapp.com software link: https://web.whatsapp.com/desktop/windows/release/ia32/WhatsAppSetup.exe Tested on:Windows 7...

OoVoo 3.7.1 DLL Hijacking

Exploit Title: OoVoo DLL Hijacking Author: Ashiyane Digital Security Team Vendor Homepage:http://www.oovoo.com/ Version: 3.7.1 Tested on:Windows 7 ---------------------------------------------------------------------------------------------------------- vulnerable DLLs :...

Foxit Reader < 8.0.2 Multiple Vulnerabilities

Binary data 9491.prm...

VMware Workstation Player 'HGFS' Feature Privilege Escalation Vulnerability - Windows

VMware Workstation Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

VMware Workstation 'HGFS' Feature Privilege Escalation Vulnerability - Windows

VMware Workstation is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Fusion 'HGFS' Feature Privilege Escalation Vulnerability - Mac OS X

VMware Fusion is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

VMware Workstation 'HGFS' Feature Privilege Escalation Vulnerability - Linux

VMware Workstation is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Tools 'HGFS Feature' Privilege Escalation Vulnerability

VMware Tools is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

Avira Free Antivirus DLL Hijacking

Hi @ll, Avira's free antivirus full package executable installers, aviraantivirusen-us.exe, aviraantivirusde-de.exe etc., available from , etc., have multiple vulnerabilities: 1. the full package executable installers really: self- extracting RAR archives extract their payload the real installer...

MEGAsync 2.9.9 DLL Hijacking

Exploit Title: MEGAsync DLL Hijacking Exploit shcore.dll Date: 27-8-2016 Author: Amir.ght Vendor Homepage: https://mega.nz Software Link: https://mega.nz/MEGAsyncSetup.exe Version: 2.9.9 Tested on:Windows 7...

Hotspot Shield DLL Hijacking

Exploit Title: Hotspot Shield DLL Hijacking Exploit shcore.dll Date: 27-8-2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com/ Software Link: https://mydati.com/download/hss-win2/HSS-773.exe Version: Tested on:Windows 7...

VMware Fusion 8.1.x < 8.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Fusion installed on the remote Mac OS X host is 8.1.x prior to 8.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the curre...

VMware Player 12.1.x < 12.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010) (Linux)

The version of VMware Player installed on the remote host is 12.1.x prior to 12.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the current...

VMware Player 12.1.x < 12.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Player installed on the remote host is 12.1.x prior to 12.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the current...

Any Video Converter 5.9.5 DLL Hijacking

Credits: HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ANY-VIDEO-CONVERTER-DLL-HIJACK.txt + ISR: ApparitionSec Vendor: =========================== www.any-video-converter.com Product: ==================================== AVCSoft / Any Video...

Huawang Cloud DLL and exe Hijacking Vulnerability

Huawang Cloud is an Internet broadband resources and server platform architecture system, with a set of cloud computing data center, able to provide a variety of technical services, and able to provide users with a smooth and clear experience of the video conferencing system. There are multiple d...

VMware ESXi updates address multiple important security issues (VMSA-2016-0010)

A DLL hijacking vulnerability is present in the VMware Tools SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...