Microsoft Skype DLL Hijacking Vulnerability

Microsoft Skype is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:skype:skype";...

Viscosity For Windows 1.6.7 Privilege Escalation

Viscosity for Windows 1.6.7 Privilege Escalation 30 Jan 2017 Homepage: https://www.sparklabs.com/ Description: ViscosityService runs as SYSTEM process. wmic service where name="ViscosityService" get StartName StartName LocalSystem Viscosity.exe contacts with service using named pipe. Only files...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

CVE-2016-6167

CVE-2016-6167 affects PuTTY beta 0.67 and stems from untrusted search path (DLL hijacking) vulnerabilities where local users can place UxTheme.dll or ntmarta.dll in the current working directory to execute arbitrary code or gain privileges. Publicly documented details describe exploitation via a ...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

CVE-2016-1417

Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that is being processed...

CVE-2016-5720

Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 msi.dll, 2 dpapi.dll, or 3 cryptui.dll that is located in the current working directory...

CVE-2016-1417

Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that is being processed...

CVE-2016-1281

Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 msi.dll, 2 dpapi.dll, or 3 cryptui.dll that is located in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that is being processed...

CVE-2016-1281

Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application...

CVE-2016-5720

CVE-2016-5720 corresponds to DLL hijacking in Microsoft Skype for Windows, caused by untrusted search paths involving msi.dll, dpapi.dll, or cryptui.dll located in the current working directory. The connected OpenVAS/Kaspersky/CNVD entries confirm this as a DLL-search-path issue in Skype’s instal...

CVE-2016-1417

CVE-2016-1417 affects Snort 2.9.7.0-WIN32. It enables DLL hijacking through a Trojan tcapi.dll located in the same folder as the pcap being processed from a remote file share, allowing remote code execution when snort.exe loads the hijacked DLL. The vulnerability is triggered during processing of...

CVE-2016-1417

Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that is being processed...

CVE-2016-1281

The CVE-2016-1281 entry describes an untrusted search path/DLL hijacking vulnerability in installers for TrueCrypt 7.2 and 7.1a , and VeraCrypt before 1.17-BETA (and possibly other products). The issue allows local users to execute arbitrary code with administrator privileges by placing a Trojan ...

CVE-2016-5720

Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 msi.dll, 2 dpapi.dll, or 3 cryptui.dll that is located in the current working directory...