CVE-2016-4802

CVE-2016-4802 affects curl/libcurl before 7.49.1. When built with SSPI or telnet, untrusted search path vulnerabilities allow local users to execute arbitrary code and facilitate DLL hijacking via security.dll, secur32.dll, or ws2_32.dll located in the application directory or current working dir...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

Security Advisory - DLL Hijacking Vulnerability on Huawei HiSuite

The HiSuite is mobile assistant software on PCs. This software contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code...

cURL 7.11.1 to 7.49.0 DLL Hijacking Arbitrary Code Execution

Binary data 802002.prm...

Adobe Flash Player DLL Hijacking

Hi @ll, the executable uninstallers for Flash Player before version 22.0.0.192 and 18.0.0.360 both released on 2016-06-15 are vulnerable to DLL hijacking: they load and execute multiple Windows system DLLs from their "application directory" instead of Windows' "system directory"...

Mozilla Firefox DLL Hijacking

Hi @ll, should have fixed CVE-2014-1520 in Mozilla's executable installers for Windows ... but does NOT! JFTR: this type of vulnerability really: a bloody stupid trivial beginner's error! is well-known and well-documented as . Proof of concept/demonstration: 0. download "Firefox Setup Stub...

NCH WavePad 6.48 DLL Hijacking

/ Exploit Title: NCH WavePad DLL Hijacking Exploit ehtrace.dll Vendor Homepage:http://www.nch.com.au/wavepad/ Author: Sachin Wagh @tigertigerboy Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555 Affected Version: WavePad 6.48 Tested on: Windows 7 Ultimate Vulnerable extension: .dvf /...

CURL-CVE-2016-4802 Windows DLL hijacking

libcurl would load Windows system DLLs in a manner that may make it vulnerable to a DLL hijacking aka binary planting attack in certain configurations. libcurl has a unified code base that builds and runs on a multitude of different versions of Windows. To make that possible, when libcurl is buil...

Process Hacker DLL Hijacking

Hi Wen Jia, You probably heart about the Java issue which affected their installer. http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html However this issue also affects multiple other installers as a security researcher has shown...

Microsoft Visual C++ DLL Hijacking

Dear Sir or Madam, I found a DLL hijacking vulnerability in your Microsoft Visual C++ 2010 Redistributable Package and Visual C++ Redistributable for Visual Studio 2015. Recently a lot of DLL hijacking issues in popular software was revealed. https://packetstormsecurity.com/files/author/6137/ So ...

AutoIT 3 DLL Hijacking

Hi, You probably heart about the Java issue which affected their installer. http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html However this issue also affects multiple other installers as a security researcher has shown...

Mozilla Firefox / Thunderbird DLL Hijacking

Hi @ll despite better knowledge and MULTIPLE bug/vulnerability reports see , , , ... Mozilla continues to ship Firefox and Thunderbird for Windows with a vulnerable executable installer. Proof of concept/demonstration: 1. visit , download and save it as ShimEng.dll in your "Downloads" folder, the...

DLL Hijacking Vulnerability in GoodSight Video Conferencing Software

GoodVision video conferencing software is a comprehensive multimedia teleconferencing system that integrates video interaction, audio interaction, electronic whiteboard, document sharing, screen sharing, remote control, remote assistance, text communication, media sharing, data distribution,...

G-Data DLL Hijacking

Hi @ll, the executable installers of G-Data's "security" products for Windows, available from , allow escalation of privilege! The downloadable executables are self-extractors containing the real executable installer as resource: they create the subdirectory...

Microsoft Internet Explorer 11 DLL Hijacking

Abstract -------- Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability Affected Version: MSHTML.DLL 11.0.9600.18231 and probably below on Windows 7 SP1 Vendor Homepage: http://www.microsoft.com Severity: high Status: fixed CVE-ID: CVE-2016-0160 Description -----------...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

CVE-2016-2780

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory...

CVE-2016-2780

CVE-2016-2780 affects Huawei UTPS (prior to UTPS-V200R003B015D15SP00C983). The vulnerability is an untrusted search path DLL hijack allowing a local attacker to execute arbitrary code by placing a Trojan horse DLL in an unspecified directory. Connected documents confirm Huawei UTPS is the affecte...