CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

CVE-2016-2780

CVE-2016-2780 affects Huawei UTPS (prior to UTPS-V200R003B015D15SP00C983). The vulnerability is an untrusted search path DLL hijack allowing a local attacker to execute arbitrary code by placing a Trojan horse DLL in an unspecified directory. Connected documents confirm Huawei UTPS is the affecte...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

IDA SDK 6.9 Demo / IDA 5.0 Freeware DLL Hijacking

Software : Interactive DisAssembler IDA PRO Version: = IDA SDK 6.9 demo IDA 5.0 Freeware Software Link: https://www.hex-rays.com/products/ida/support/download.shtml Tested on: WINDOWS XP SP3 - 32 bit, WINDOWS 7 SP1 - 32 bit, Windows 8.1 32 bit IDA Pro suffers from DLL HIJACK Vulnerability from .i...

In-depth analysis DLL hijacking vulnerability-vulnerability warning-the black bar safety net

0×0 1. DLL hijacking vulnerability description 1.1 vulnerability profile If the process tries to load a DLL without specifying the DLL's absolute path, then Windows will try to go to the specified directory to find the DLL; if the attacker is able to control which of a certain directory, and put ...

Comodo DLL Hijacking

Hi @ll, the executable installers cispro30dayinstaller11508d.exe, cispremiuminstaller610008.exe, cavinstaller595160.exe, cavinstaller.exe and cfwinstaller.exe available from load and execute several DLLs from their "application directory". For software downloaded with a web browser the applicatio...

ABB Panel Builder 800 DLL Hijacking Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-077-01 ABB Panel Builder 800 DLL Hijacking Vulnerability that was published March 17, 2016, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified a DLL Hijacking vulnerability in the ABB...

Malwarebytes 2.2.0.1024 DLL Hijacking

Hi @ll, Malwarebytes executable installers mbam-setup-2.2.0.1024.exe and mbae-setup-1.08.1.1189.exe available from and load and execute UXTheme.dll and DWMAPI.dll from their "application directory". For software downloaded with a web browser the application directory is typically the user's...

ClamWin 0.99 DLL Hijacking

Hi @ll, the executable installer clamwin-0.99-setup.exe available from loads and executes DWMAPI.dll or UXTheme.dll from its "application directory". For software downloaded with a web browser the application directory is typically the user's "Downloads" directory: see , and for "prior art" about...

Security Advisory - DLL Hijacking Vulnerability on Huawei UTPS

Huawei UTPS software runs on USB modem products to manage data cards. It provides data card setting, dial-up setting, message sending and receiving, and contacts management functions. UTPS contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by UTPS...

Putty 0.66 DLL Hijacking

Hi, putty-0.66-installer.exe loads and executes DWMAPI.dll or UXTheme.dll from its "application directory". For software downloaded with a web browser the application directory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented...

Comodo Anti-Virus GeekBuddy DLL Hijacking

...... ,;''''''''''''''''';, .;''''''''''''''''''''''''''', :''''''''+';:,..,:;'''''''''': ,;'''''';,. ,;'''''';: :'''''',. ,'''''';. ;+''+': ,; ,''''';. ;'''';. .:;' . ;'''''. :+'''; ,:+'' ';;',''; :''''; .''''; ,';' '':' ';,''',' :''' .'' :'''', ;'''' ;'' :+. ;';, ';:' '''',;:+ '', ;'''' .''''...

GIMP For Windows DLL Hijacking

Hi @ll, the executable installer gimp-2.8.16-setup-1.exe and of course older versions too available from loads and executes UXTheme.dll from its "application directory". For software downloaded with a web browser the application directory is typically the user's "Downloads" directory: see , and...

Cygwin DLL Hijacking

Hi @ll, Cygwin's setup-x86.exe loads and executes UXTheme.dll on Windows XP also ClbCatQ.dll and some more DLLs from its "application directory". For software downloaded with a web browser the application directory is typically the user's "Downloads" directory: see , and If UXTheme.dll or one of...

Algobox 0.9 DLL Hijacking

Exploit Title: ALGOBOX DLL HIJACKING VULNERABILTY Date: FEB 14 2016 Exploit Author: SHANTANU KHANDELWAL Vendor Homepage: http://www.xm1math.net Software Link: http://www.xm1math.net/algobox/algoboxwin32install.exe Version: LPORT=4444 quserex.dll Exploit: Place a dummy .alg file with the malicious...

WinImage DLL Hijacking

Hi @ll, the executable installer winima90.exe and previous versions available from loads and executes CRTdll.dll, UXTheme.dll, RichEd32.dll and WindowsCodecs.dll from its "application directory". Self-extracting executables created with WinImage load and execute CRTdll.dll, UXTheme.dll and MPR.dl...

Winhex Editor 18.7 DLL Hijacking

Exploit Title: WINHEX EDITOR DLL HIJACKING VULNERABILTY Date: JAN 28 2016 Exploit Author: SHANTANU KHANDELWAL Vendor Homepage: www.winhex.com Software Link: http://www.winhex.com/winhex.zip Version: LPORT=4444 mssvp.dll Exploit: Place a dummy .whx or .whs file with the malicious dll . When the...

WiX Toolset DLL Hijacking

Hi @ll, executable installers ° created with the WiX Toolset see , and of course the WiX Toolset installer itself too resp. using its bootstrapper "burn.exe" are vulnerable: see 1. They load and execute a rogue/bogus/malicious FEClient.dll ' and other DLLs too, dependent on the version of Windows...

BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution

/ BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution Vendor: West Control Solutions PMA Prozeß- und Maschinen-Automation GmbH Product web page: http://www.west-cs.com Software link: http://www.west-cs.com/resources/software-temp-control/pma-products-software/ Application Path:...