Nitro Pro 8 Insecure Library Loading

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Nitro Pro 8 - Insecure Library Loading Allows Remote Code Execution DLL Hijacking product: Nitro Pro vulnerable version: 8.5.0.26; older versions may also be affected fix...

Skype Click to Call Update Service local privilege escalation

Vuln Title: Skype Click to Call Update Service local privilege escalation Date: 10.12.2012 Author: otr Software Link: http://www.skype.com Vendor: Microsoft Corporation Version: = 6.2.0.106 Tested on: Windows 7, Windows XP Type: Privilege Escalation, DLL Hijacking CVE : MS does not assign CVE for...

Skype Click To Call 6.2.0.106 Privilege Escalation

Vuln Title: Skype Click to Call Update Service local privilege escalation Date: 10.12.2012 Author: otr Software Link: http://www.skype.com Vendor: Microsoft Corporation Version: = 6.2.0.106 Tested on: Windows 7, Windows XP Type: Privilege Escalation, DLL Hijacking CVE : MS does not assign CVE for...

Chinese malware campaign 'Beebus' target US defense industries

A Chinese malware campaign called 'Beebus' specifically targeting the aerospace and defense industries has been uncovered by FireEye security researchers. Beebus is designed to steal information, and begins its infiltration, as so many attacks do, with spear-phishing emails. Operation Beebus very...

Active Perl 'Perl_repeatcpy()' Function Buffer Overflow Vulnerability - Windows

Active Perl is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : mozilla -- multiple vulnerabilities (d23119df-335d-11e2-b64c-c8600054b392)

The Mozilla Project reports : MFSA 2012-91 Miscellaneous memory safety hazards rv:17.0/ rv:10.0.11 MFSA 2012-92 Buffer overflow while rendering GIF images MFSA 2012-93 evalInSanbox location context incorrectly applied MFSA 2012-94 Crash when combining SVG text on path with CSS MFSA 2012-95...

Firefox installer DLL hijacking — Mozilla

Security researcher Robert Kugler reported that when a specifically named DLL file on a Windows computer is placed in the default downloads directory with the Firefox installer, the Firefox installer will load this DLL when it is launched. In circumstances where the installer is run by an...

The KMPlayer v3.3.0.33 Multiple Vulnerabilities

Stack Based Buffer Overflow Vulnerability DLL Hijacking Vulnerability Exploit Title: The KMPlayer Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN...

KMPlayer 3.3.0.33 Buffer Overflow / DLL Hijack

Exploit Title: The KMPlayer v3.3.0.33 Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN Buffer Overflow Vulnerability: junk = "\x41" 250 eip =...

KMPlayer 3.3.0.33 - Multiple Vulnerabilities

KMPlayer 3.3.0.33 - Multiple Vulnerabilities Exploit Title: The KMPlayer v3.3.0.33 Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN Buffer Overflo...

KMPlayer 3.3.0.33 - Multiple Vulnerabilities

Exploit Title: The KMPlayer v3.3.0.33 Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN Buffer Overflow Vulnerability: junk = "\x41" 250 eip =...

UMPlayer 0.98 DLL Hijacking

/ Exploit Title: UMPlayer 0.98 DLL Hijacking Exploit wintab32.dll Date: 31/10/2012 Author: Metropolis Url: http://metropolis.fr.cr Software info: UMPlayer is the media player that fills all your needs. With dozens of advanced features and built-in codecs it can handle any media format. Software...

7-Technologies Termis DLL Hijacking

Overview ICS-CERT originally released Advisory ICSA-12-025-02P on the US-CERT secure portal on January 25, 2012. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the Security Research and Service Institute−Information and...

Arora 0.10.0 Windows Qt 4.5.3 DLL Hijack

/ Exploit Title: Arora 0.10.0 Windows Qt 4.5.3 DLL Hijacking Exploit wintab32.dll Date: 27/10/2012 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://code.google.com/p/arora/downloads/detail?name=Arora%200.10.0-1%20Installer.exe&can=2&q= Version: 0.10.0 Tested on: Windows 7...

IBM Lotus Symphony Multiple Untrusted Search Path Vulnerabilities - Windows

IBM Lotus Symphony is prone to multiple untrusted search path vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMWare Tools privilege escalation

It's possible to execute code via DLL hijacking...

KLA10099 LPE vulnerability in Camtasia Studio

An untrusted path vulnerability was found in Camtasia Studio. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking. Original advisories - Related products Camtasia-Studio CVE list CVE-2010-5234 high Solution Update to...

CVE-2012-4866

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party...

CVE-2012-4866

CVE-2012-4866 describes an untrusted search path vulnerability in Xtreme RAT 3.5 that enables local users to execute arbitrary code via a Trojan horse dwmapi.dll located in the current working directory, i.e., a DLL hijacking scenario. The connected documents corroborate this, listing the same de...