VMware product updates address multiple important security issues

a. DLL hijacking issue in Windows-based VMware Tools A DLL hijacking vulnerability is present in the VMware Tools "Shared Folders" HGFS feature running on Microsoft Windows. Exploitation of this issue may lead to arbitrary code execution with the privileges of the victim. In order to exploit this...

VMSA-2016-0010:VMware product updates address multiple HIGH security issues

VMSA-2016-0010.1 VMware product updates address multiple important security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0010.1 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware product updates address multiple security issue...

Dropbox 6.4.14 DLL Hijacking

Aloha, Summary Dropbox Installer for Windows contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to some DLL file is loaded by 'DropboxInstaller.exe' improperly. And it allows an...

ownCloud: ownCloud 2.2.2.6192 DLL Hijacking Vulnerability

Summary ownCloud contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to some DLL file is loaded by 'ownCloud-2.2.2.6192-setup.exe' improperly. And it allows an attacker to load...

f.lux DLL Hijacking

Aloha, f.lux suffers from a DLL hijacking vulnerability. "flux-setup.exe" loads and executes dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and...

7-Zip 16.02 DLL Hijacking

Aloha, 7z1602-x64.exe loads and executes dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an attacker place...

Bitdefender Antivirus Free Edition DLL Hijacking

Aloha, AntivirusFreeEditionx64.exe loads and executes dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...

360 Total Security 2016 DLL Hijacking

Aloha, 360TSESetup8.2.0.1039.exe loads and executes WindowsCodecs.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented...

Notepad++ 6.9.2 DLL Hijacking

Aloha, npp.6.9.2.Installer.exe loads and executes dwmapi.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If a...

Python 3.5.2 DLL Hijacking

Aloha, python-3.5.2.exe loads and executes fwbase.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...

Putty Beta 0.67 DLL Hijacking

/ Exploit Title: Putty DLL Hijacking Exploit UxTheme.dll or ntmarta.dll Vendor Homepage:https://the.earth.li/sgtatham/putty/latest/x86/putty.exe Author: Sachin Wagh @tigertigerboy Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555 Affected Version: beta 0.67 Tested on: Windows 7 Ultimate /...

Haxx cURL and libcurl untrusted search path vulnerability

Haxx cURL and Libcurl are both products of the Swedish company Haxx. cURL is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. An untrustworthy search path vulnerability exists in Haxx cURL and libcurl...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4802

CVE-2016-4802 affects curl/libcurl before 7.49.1. When built with SSPI or telnet, untrusted search path vulnerabilities allow local users to execute arbitrary code and facilitate DLL hijacking via security.dll, secur32.dll, or ws2_32.dll located in the application directory or current working dir...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

Security Advisory - DLL Hijacking Vulnerability on Huawei HiSuite

The HiSuite is mobile assistant software on PCs. This software contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code...