Huawei eSpace Desktop V200R003C00 has multiple untrusted search path vulnerabilities

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. Multiple untrusted search path vulnerabilities exist in versions prior to Huawei eSpace Desktop V200R003C00, which allow local users to execute arbitrary code and perform DLL hijacking attacks via the Trojan horse...

UCell Software For ZTE Modems DLL Hijacking

/ Exploit Title: UCell Software for ZTE Modems quserex.dll Path Subversion Local Privilege Escalation Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://ucell.uz/en/subscribers/devices/modems/upgradeyourmodem Tested on: windows 7 / include BOOL WINAPI DllMain HANDLE...

iFunbox 2014 3.4.697.652 DLL Hijacking

/ Exploit Title:iFunbox 2014 3.4.697.652 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://i-funbox.com/ Soft link :http://dl.i-funbox.com/ifunbox2014setup.exe Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE...

Phoenix Service Software 2012.16.004.48159(Nokia) DLL Hijacking

/ Exploit Title: Phoenix Service Software 2012.16.004.48159Nokia DLL Hijacking Exploit phoenixresources.dll,iagnosticlog.dll,phoenixresources.dll,diagnosticlog.dll Date: 25/12/2014 Author:Hadji Samir [email protected] Version: 2012.16.004.48159 Vendor Homepage: http://www.Nokia.com/ Tested on:...

MobiConnect 23.009.17.00.216 Privilege Escalation / DLL Hijacking

/ Exploit Title: MobiConnect 23.009.17.00.216 HUAWEI Insecure Permissions Local Privilege Escalation & DLL Hijacking Exploit wintab32.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.mobilis.dz/entreprises/mobiconnect.php Vendor: http://www.huawei.com/ Tested o...

iExplorer 3.6.3.0 DLL Hijacking

/ Exploit Title: iExplorer 3.6.3.0 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.macroplant.com/ Soft link :http://www.macroplant.com/downloads Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE hinstDLL,...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9416

Huawei eSpace Desktop (pre-V200R003C00) is affected by DLL Hijacking involving mfc71enu.dll, mfc71loc.dll, tcapi.dll and airpcap.dll. The vulnerability, described as untrusted search path leading to arbitrary code execution, relies on loading these libraries via Trojan-horse scenarios. Multiple C...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product

Huawei eSpace Desktop products have the following vulnerabilities: 1 The program does not implement comprehensive validity check on the QES file imported into the system, causing the system to exit unexpectedly. Vulnerability ID: HWPSIRT-2014-1151 This vulnerability has been assigned Common...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Design/Logic Flaw

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

CVE-2014-8359

CVE-2014-8359 corresponds to an untrusted search path vulnerability in Huawei Mobile Partner for Windows (version 23.009.05.03.1014) that enables local privilege escalation via DLL hijacking. An attacker could place a crafted wintab32.dll in the Mobile Partner directory to execute arbitrary code ...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Design/Logic Flaw

Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory...

CVE-2014-0619

Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory...

CVE-2014-0619

Hamster Free ZIP Archiver 2.0.1.7 is affected by a DLL hijacking vulnerability (dwmapi.dll) in the current working directory, enabling local users to achieve arbitrary code execution. The issue stems from an untrusted search path, as reported for CVE-2014-0619, with exploit details showing a Troj...

Security Advisory-DLL Hijacking Vulnerability on Huawei USB Modem products

This security advisory SA describes the impact of DLL-Hijacking vulnerability discovered in website. Vulnerability ID: HWPSIRT-2014-1046 This vulnerability is referenced in this document as follows: Any user in the system can modify the legitimate binary to any kind of malicious executable. If an...

Huawei Mobile Partner DLL Hijacking

Title: Huawei Mobile Partner Multiple Vulnerabilities Version: 23.009.05.03.1014 Tested on: Windows XP SP2 en Vendor: http://www.huawei.com/ Software-Link: http://download-c.huawei.com/download/downloadCenter?downloadId=18474&version=16815&siteCode=worldwide E-Mail: osandaatunseen.is Author: Osan...