Microsoft Windows Movie Maker Insecure Library Loading (MS10-093; CVE-2010-3967)

Windows Movie Maker is an application that allows users to create, edit, and add special effects to home movies. A remote code execution vulnerability has been reported in the way that Windows Movie Maker handles the loading of DLL files. The vulnerability is caused when the Windows Movie Maker...

Microsoft Windows Address Book Insecure Library Loading (MS10-096; CVE-2010-3147)

The Windows Address Book WAB is an application and service that has a local database and user interface for finding and editing information about people, and it can query network directory servers using Lightweight Directory Access Protocol LDAP. A remote code execution vulnerability has been...

Native Instruments (Multiple Products) - DLL Loading Arbitrary Code Execution

Native Instruments Multiple Products - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44989/info Multiple products from Native Instruments are prone to multiple vulnerabilities that let attackers execute arbitrary code. An attacker can exploit these issues by...

Silo 2.1.1 - wintab32.dll DLL Loading Arbitrary Code Execution

Silo 2.1.1 - wintab32.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44726/info Silo is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to...

Silo 2.1.1 - 'wintab32.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44726/info Silo is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Audacity <= 1.3 Beta Multiple Local Vulnerabilities

Audacity = 1.3 Beta Multiple Local Vulnerabilities Name Audacity Vendor http://audacity.sourceforge.net Versions Affected = 1.3 Beta Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-29 X. INDEX I. ABOUT THE...

Audacity 1.3 Beta DLL Hijacking

Audacity = 1.3 Beta Multiple Local Vulnerabilities Name Audacity Vendor http://audacity.sourceforge.net Versions Affected = 1.3 Beta Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-29 X. INDEX I. ABOUT THE...

Microsoft Windows Vista - lpksetup.exe oci.dll DLL Loading Arbitrary Code Execution

Microsoft Windows Vista - lpksetup.exe oci.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44414/info Microsoft Windows 'lpksetup.exe' is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a...

Microsoft Windows Vista - 'lpksetup.exe oci.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44414/info Microsoft Windows 'lpksetup.exe' is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...

Mozilla Thunderbird < 3.0.9 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.0.9. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could lead to memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-64 - By passing an excessively long...

Mozilla Thunderbird 3.0.x < 3.0.9 Multiple Vulnerabilities

Binary data 5683.prm...

Mozilla Firefox 3.6.x < 3.6.11 Multiple Vulnerabilities

Binary data 5682.prm...

Mozilla Thunderbird 3.1.x < 3.1.5 Multiple Vulnerabilities

Binary data 801331.prm...

Mozilla Thunderbird 3.1.x < 3.1.5 Multiple Vulnerabilities

Binary data 5684.prm...

Mozilla Firefox 3.5.x < 3.5.14 Multiple Vulnerabilities

Binary data 5681.prm...

Mozilla SeaMonkey 2.0.x < 2.0.9 Multiple Vulnerabilities

Binary data 801286.prm...

Unsafe library loading vulnerabilities — Mozilla

Mozilla developer Ehsan Akhgari reported that a function used to load external libraries on Windows platforms was using a relative path to a DLL-loading application and was thus vulnerable to binary planting if an attacker was able to place an executable of the same name in the current working...

Phoenix Project Manager 2.1.0.8 - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44198/info Phoenix Project Manager is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location...

Cool iPhone Ringtone Maker 2.2.3 - dwmapi.dll DLL Loading Arbitrary Code Execution

Cool iPhone Ringtone Maker 2.2.3 - dwmapi.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44205/info Cool iPhone Ringtone Maker is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

Cool iPhone Ringtone Maker 2.2.3 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44205/info Cool iPhone Ringtone Maker is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share locatio...