4311 matches found
Bandizip不安全库加载漏洞
CVECAN ID: CVE-2014-1680 Bandizip是免费的轻量级Zip压缩软件。 Bandisoft Bandizip 3.10之前版本加载库（例如dwmapi.dll的方式不安全，攻击者通过诱使用户打开远程WebDAV或SMB共享上的文件，利用此漏洞可加载任意库。 0 bandisoft Bandizip 3.08 厂商补丁： bandisoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.bandisoft.com/bandizip/history/ / Exploit Title: Bandizip...
Bandizip 3.09 DLL Hijack
/ Exploit Title: Bandizip 3.09 DLL Hijacking Exploit dwmapi.dll Date: February 5th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissagmail.com Version: 3.09 Vendor Homepage: http://www.bandisoft.com/ Tested on: Windows XP SP2 en Vulnerable extensions: All Extensions CVE: CVE-2014-1680...
CVE-2013-1361
Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a fi...
Design/Logic Flaw
Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a fi...
CVE-2013-1361
The CVE-2013-1361 issue affects Lenovo ThinkPad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier. It arises from loading DLLs from untrusted paths, allowing DLL hijacking via a Trojan DLL located in the same folder as a processed file, enabling arbitrary code execution in the use...
CVE-2013-1361
Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a fi...
Ophcrack 3.6 DLL Hijacking
/ Title: Ophcrack 3.6 Dll Hijacking Exploit quserex.dll Version: 3.6 Tested on: Windows 8 64-bit ,Windows XP SP2 en Vendor: http://ophcrack.sourceforge.net/ Software Link: http://sourceforge.net/projects/ophcrack/files/ophcrack/3.6.0/ophcrack-win32-installer-3.6.0.exe E-Mail:...
CVE-2010-1819
Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 CoreVideo.dll, 2 CoreGraphics.dll, or 3 CoreAudioToolbox.dll that is locate...
Design/Logic Flaw
Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 CoreVideo.dll, 2 CoreGraphics.dll, or 3 CoreAudioToolbox.dll that is locate...
CVE-2010-1819
CVE-2010-1819 relates to Apple QuickTime Picture Viewer prior to version 7.6.8. The vulnerability is an untrusted search path (DLL hijacking) issue where a Trojan horse placed alongside a .pic image can cause the Picture Viewer to load one of three libraries (CoreVideo.dll, CoreGraphics.dll, Core...
Winrar compression Manager DLL-hijacking-vulnerability warning-the black bar safety net
Brief description: Pass to kill all the individual language version of the Winrar compression package Manager Detailed description: On the network there are many separate language version of the Winrar compression package Manager, it is our common use of a software For example: Chinese version,...
SNES9x ReRecording Emulator DLL Hijacking
Exploit Title: SNES9x ReRecording Emulator codecmpeg.dll - DLL Hijacking Vulnerability Date: 7 Desember 2013 Author: DevilScreaM Software Link: http://www.softpedia.com/dyn-postdownload.php?p=238598&t=4&i=1 Version: 1.x.x Vendor : http://www.snes9x.com/ Tested : Windows XP / Windows 7 gcc -shared...
Wondershare Player 1.6.0 DLL Hijacking
/ Exploit Title: Wondershare Player 1.6.0 wsconverterex.dll - DLL Hijacking Vulnerability // Date: 27.11.2013 // Exploit Author: Akin Tosunlar // Software Link: http://download.wondershare.com/playerfull1374.exe // Version: 1.6.0 Probably old version of software and the LATEST version too // Vend...
Symantec PGP Desktop Untrusted Search Path Vulnerability
Symantec PGP Desktop is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PPLive 播放器DLL劫持漏洞
PPLive是一款国内流行的媒体播放程序 PPLive在加载DLL文件时考虑不周导致可能的DLL劫持，允许攻击者构建恶意DLL，在应用程序加载时执行任意代码 0 PPTVPPlive 厂商解决方案 目前没有详细解决方案提供： http://www.pptv.com/...
Soda PDF Insecure Library Loading Vulnerability - Windows
Soda PDF is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:soda:sodapdf"; if...
Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal
Security Advisory ID: NETRESEC-1386968 http://netresec.com/?b=1386968 NetworkMiner version 1.4.1 and older is vulnerable to DLL hijacking and contains a directory traversal vulnerability. ==Description== NetworkMiner is a tool designed for network forensics and network security monitoring. It is...
HTCSyncManagerUpdate DLL Hijacking
Exploit Title: HTCSyncManagerUpdate quserex.dll & mfc71enu.dll & mfc71loc.dll Path Subversion Arbitrary DLL Injection Code Execution Author: IranianDarkCodersTeam Discovered by A.CH12 Software Link: http://www.htc.com/ Version: 2.1.46.0 Tested on: Windows 7 //...
FreeBSD : mozilla -- multiple vulnerabilities (0998e79d-0055-11e3-905b-0025905a4771)
The Mozilla Project reports : MFSA 2013-63 Miscellaneous memory safety hazards rv:23.0 / rv:17.0.8 MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MF...