Winrar compression Manager DLL-hijacking-vulnerability warning-the black bar safety net

Brief description: Pass to kill all the individual language version of the Winrar compression package Manager Detailed description: On the network there are many separate language version of the Winrar compression package Manager, it is our common use of a software For example: Chinese version,...

SNES9x ReRecording Emulator DLL Hijacking

Exploit Title: SNES9x ReRecording Emulator codecmpeg.dll - DLL Hijacking Vulnerability Date: 7 Desember 2013 Author: DevilScreaM Software Link: http://www.softpedia.com/dyn-postdownload.php?p=238598&t=4&i=1 Version: 1.x.x Vendor : http://www.snes9x.com/ Tested : Windows XP / Windows 7 gcc -shared...

Wondershare Player 1.6.0 DLL Hijacking

/ Exploit Title: Wondershare Player 1.6.0 wsconverterex.dll - DLL Hijacking Vulnerability // Date: 27.11.2013 // Exploit Author: Akin Tosunlar // Software Link: http://download.wondershare.com/playerfull1374.exe // Version: 1.6.0 Probably old version of software and the LATEST version too // Vend...

Symantec PGP Desktop Untrusted Search Path Vulnerability

Symantec PGP Desktop is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PPLive 播放器DLL劫持漏洞

PPLive是一款国内流行的媒体播放程序 PPLive在加载DLL文件时考虑不周导致可能的DLL劫持，允许攻击者构建恶意DLL，在应用程序加载时执行任意代码 0 PPTVPPlive 厂商解决方案 目前没有详细解决方案提供： http://www.pptv.com/...

Soda PDF Insecure Library Loading Vulnerability - Windows

Soda PDF is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:soda:sodapdf"; if...

Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal

Security Advisory ID: NETRESEC-1386968 http://netresec.com/?b=1386968 NetworkMiner version 1.4.1 and older is vulnerable to DLL hijacking and contains a directory traversal vulnerability. ==Description== NetworkMiner is a tool designed for network forensics and network security monitoring. It is...

HTCSyncManagerUpdate DLL Hijacking

Exploit Title: HTCSyncManagerUpdate quserex.dll & mfc71enu.dll & mfc71loc.dll Path Subversion Arbitrary DLL Injection Code Execution Author: IranianDarkCodersTeam Discovered by A.CH12 Software Link: http://www.htc.com/ Version: 2.1.46.0 Tested on: Windows 7 //...

FreeBSD : mozilla -- multiple vulnerabilities (0998e79d-0055-11e3-905b-0025905a4771)

The Mozilla Project reports : MFSA 2013-63 Miscellaneous memory safety hazards rv:23.0 / rv:17.0.8 MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MF...

Mozilla Firefox < 23.0 Multiple Vulnerabilities

Binary data 801463.prm...

Firefox full and stub installer DLL hijacking — Mozilla

Security researcher Robert Kugler reported in 2012 that when a specifically named DLL file on a Windows computer is placed in the default downloads directory with the Firefox installer, the Firefox installer will load this DLL file when it is launched. Mozilla developers Brian Bondy and Robert...

DLL hijacking vulnerability analysis-vulnerability warning-the black bar safety net

Hack in the hands of the new weapons Eric 2 0 1 2 early release of China 2 0 1 1 in the second half of the personal Internet Security report, containing such a data: 2 0 1 1 in the second half of ten hot points of the Trojans, where 5 is the use of DLL hijacking vulnerability to system damage. DL...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7741)

Mozilla Firefox has been updated to the17.0.6ESR security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and ...

Nitro Pro 8 Insecure Library Loading

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Nitro Pro 8 - Insecure Library Loading Allows Remote Code Execution DLL Hijacking product: Nitro Pro vulnerable version: 8.5.0.26; older versions may also be affected fix...

Skype Click to Call Update Service local privilege escalation

Vuln Title: Skype Click to Call Update Service local privilege escalation Date: 10.12.2012 Author: otr Software Link: http://www.skype.com Vendor: Microsoft Corporation Version: = 6.2.0.106 Tested on: Windows 7, Windows XP Type: Privilege Escalation, DLL Hijacking CVE : MS does not assign CVE for...

Skype Click To Call 6.2.0.106 Privilege Escalation

Vuln Title: Skype Click to Call Update Service local privilege escalation Date: 10.12.2012 Author: otr Software Link: http://www.skype.com Vendor: Microsoft Corporation Version: = 6.2.0.106 Tested on: Windows 7, Windows XP Type: Privilege Escalation, DLL Hijacking CVE : MS does not assign CVE for...

Chinese malware campaign 'Beebus' target US defense industries

A Chinese malware campaign called 'Beebus' specifically targeting the aerospace and defense industries has been uncovered by FireEye security researchers. Beebus is designed to steal information, and begins its infiltration, as so many attacks do, with spear-phishing emails. Operation Beebus very...

Active Perl 'Perl_repeatcpy()' Function Buffer Overflow Vulnerability - Windows

Active Perl is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : mozilla -- multiple vulnerabilities (d23119df-335d-11e2-b64c-c8600054b392)

The Mozilla Project reports : MFSA 2012-91 Miscellaneous memory safety hazards rv:17.0/ rv:10.0.11 MFSA 2012-92 Buffer overflow while rendering GIF images MFSA 2012-93 evalInSanbox location context incorrectly applied MFSA 2012-94 Crash when combining SVG text on path with CSS MFSA 2012-95...

Firefox installer DLL hijacking — Mozilla

Security researcher Robert Kugler reported that when a specifically named DLL file on a Windows computer is placed in the default downloads directory with the Firefox installer, the Firefox installer will load this DLL when it is launched. In circumstances where the installer is run by an...