Bitdefender Endpoint Security Tool Code Issue Vulnerability

Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A code issue vulnerability exists in the EPSecurityService.exe file in versions prior to Bitdefender Endpoint Security Tools 6.6.11.163. The vulnerability stems from an improper desig...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a DLL sideloading issue in the product installer that could load other DLL files located in the same directory. The vulnerability arises during installation, enabling local manipulation of loaded DLLs. Available public references describe Tr...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

PT-2020-20231

Name of the Vulnerable Software and Affected Versions Trend Micro Vulnerability Protection version 2.0 Description The issue allows an attack to use the product installer to load other DLL files located in the same directory. Recommendations For Trend Micro Vulnerability Protection version 2.0,...

CVE-2020-8096

Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204...

CVE-2013-3942

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

Remote code execution

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

CVE-2013-3942

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

CVE-2013-3942

CVE-2013-3942 affects PotPlayer prior to 1.5.39659. The vulnerability is a DLL loading Arbitrary Code Execution vulnerability rooted in the way the player loads DLLs. Public references in the connected documents describe the impact as arbitrary code execution, with an indication of potential expl...

CVE-2013-3942: Untrusted Search Path

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

PT-2020-7472

Name of the Vulnerable Software and Affected Versions: Potplayer versions prior to 1.5.39659 Description: The issue allows for arbitrary code execution due to a DLL loading vulnerability. Recommendations: For versions prior to 1.5.39659, update to version 1.5.39659 or later to resolve the issue...

TrendMicro Anti-Threat Toolkit Improper Fix

Hi @ll, on September 29, 2019, John Page reported a remote code execution with escalation of privilege in TrendMicro's Anti-Threat Toolkit to its vendor. TrendMicro assigned CVE-2019-9491 to this vulnerability and told the reporter, his dog and the world on October 18, 2019, that they had fixed t...

PSF-2020-7 CVE-2020-8315: Unsafe DLL loading in getpathp.c on Windows 7

In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...

CVE-2019-17099

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163...

PT-2020-8049

Name of the Vulnerable Software and Affected Versions: Symantec Norton Download Manager versions prior to 5.6 Description: A remote user can create a specially crafted DLL file to execute arbitrary code when the Norton Download Manager component is run. This is achieved by loading the remote user...

CVE-2016-6590

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec...

CVE-2016-6590

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec...

PT-2019-16010

Name of the Vulnerable Software and Affected Versions Malwarebytes AdwCleaner versions prior to 8.0.1 Description The issue is related to an Untrusted Search Path vulnerability, which could lead to arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded by the...