cURL 7.11.1 to 7.49.0 DLL Hijacking Arbitrary Code Execution

Binary data 802002.prm...

Adobe Flash Player DLL Hijacking

Hi @ll, the executable uninstallers for Flash Player before version 22.0.0.192 and 18.0.0.360 both released on 2016-06-15 are vulnerable to DLL hijacking: they load and execute multiple Windows system DLLs from their "application directory" instead of Windows' "system directory"...

Mozilla Firefox DLL Hijacking

Hi @ll, should have fixed CVE-2014-1520 in Mozilla's executable installers for Windows ... but does NOT! JFTR: this type of vulnerability really: a bloody stupid trivial beginner's error! is well-known and well-documented as . Proof of concept/demonstration: 0. download "Firefox Setup Stub...

NCH WavePad 6.48 DLL Hijacking

/ Exploit Title: NCH WavePad DLL Hijacking Exploit ehtrace.dll Vendor Homepage:http://www.nch.com.au/wavepad/ Author: Sachin Wagh @tigertigerboy Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555 Affected Version: WavePad 6.48 Tested on: Windows 7 Ultimate Vulnerable extension: .dvf /...

CURL-CVE-2016-4802 Windows DLL hijacking

libcurl would load Windows system DLLs in a manner that may make it vulnerable to a DLL hijacking aka binary planting attack in certain configurations. libcurl has a unified code base that builds and runs on a multitude of different versions of Windows. To make that possible, when libcurl is buil...

Process Hacker DLL Hijacking

Hi Wen Jia, You probably heart about the Java issue which affected their installer. http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html However this issue also affects multiple other installers as a security researcher has shown...

AutoIT 3 DLL Hijacking

Hi, You probably heart about the Java issue which affected their installer. http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html However this issue also affects multiple other installers as a security researcher has shown...

Microsoft Visual C++ DLL Hijacking

Dear Sir or Madam, I found a DLL hijacking vulnerability in your Microsoft Visual C++ 2010 Redistributable Package and Visual C++ Redistributable for Visual Studio 2015. Recently a lot of DLL hijacking issues in popular software was revealed. https://packetstormsecurity.com/files/author/6137/ So ...

Mozilla Firefox / Thunderbird DLL Hijacking

Hi @ll despite better knowledge and MULTIPLE bug/vulnerability reports see , , , ... Mozilla continues to ship Firefox and Thunderbird for Windows with a vulnerable executable installer. Proof of concept/demonstration: 1. visit , download and save it as ShimEng.dll in your "Downloads" folder, the...

DLL Hijacking Vulnerability in GoodSight Video Conferencing Software

GoodVision video conferencing software is a comprehensive multimedia teleconferencing system that integrates video interaction, audio interaction, electronic whiteboard, document sharing, screen sharing, remote control, remote assistance, text communication, media sharing, data distribution,...

G-Data DLL Hijacking

Hi @ll, the executable installers of G-Data's "security" products for Windows, available from , allow escalation of privilege! The downloadable executables are self-extractors containing the real executable installer as resource: they create the subdirectory...

Microsoft Internet Explorer 11 DLL Hijacking

Abstract -------- Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability Affected Version: MSHTML.DLL 11.0.9600.18231 and probably below on Windows 7 SP1 Vendor Homepage: http://www.microsoft.com Severity: high Status: fixed CVE-ID: CVE-2016-0160 Description -----------...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

CVE-2016-2780

CVE-2016-2780 affects Huawei UTPS (prior to UTPS-V200R003B015D15SP00C983). The vulnerability is an untrusted search path DLL hijack allowing a local attacker to execute arbitrary code by placing a Trojan horse DLL in an unspecified directory. Connected documents confirm Huawei UTPS is the affecte...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

IDA SDK 6.9 Demo / IDA 5.0 Freeware DLL Hijacking

Software : Interactive DisAssembler IDA PRO Version: = IDA SDK 6.9 demo IDA 5.0 Freeware Software Link: https://www.hex-rays.com/products/ida/support/download.shtml Tested on: WINDOWS XP SP3 - 32 bit, WINDOWS 7 SP1 - 32 bit, Windows 8.1 32 bit IDA Pro suffers from DLL HIJACK Vulnerability from .i...

In-depth analysis DLL hijacking vulnerability-vulnerability warning-the black bar safety net

0×0 1. DLL hijacking vulnerability description 1.1 vulnerability profile If the process tries to load a DLL without specifying the DLL's absolute path, then Windows will try to go to the specified directory to find the DLL; if the attacker is able to control which of a certain directory, and put ...

Comodo DLL Hijacking

Hi @ll, the executable installers cispro30dayinstaller11508d.exe, cispremiuminstaller610008.exe, cavinstaller595160.exe, cavinstaller.exe and cfwinstaller.exe available from load and execute several DLLs from their "application directory". For software downloaded with a web browser the applicatio...