843 matches found
Microsoft Office Patch Installer Has Multiple DLL Loading Remote Code Execution Vulnerabilities
Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. Microsoft Office suffers from multiple DLL loading remote code execution vulnerabilities. An attacker could execute arbitrary code in the user environment of the affected application, and ...
PT-2018-5611
Name of the Vulnerable Software and Affected Versions: SpiderControl MicroBrowser versions 1.6.30.144 and prior Description: An uncontrolled search path element issue has been identified, which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is...
KLA11237 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF
Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An unsafe DLL loading...
JVN#85056623: Installer of SoundEngine Free may insecurely load Dynamic Link Libraries
Installer of SoundEngine Free contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use the latest installer...
Swisscom MySwisscomAssistant DLL Loading Vulnerability
Swisscom MySwisscomAssistant is a telecom network assistant program from Swisscom, Switzerland. The program helps to set up, maintain and manage the network. A security vulnerability exists in the handling of multiple DLLs files in Swisscom MySwisscomAssistant version 2.17.1.1065. A remote attack...
CVE-2018-6766
Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that coul...
CVE-2018-6766
Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that coul...
CVE-2018-6765
Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing...
PT-2018-17723
Name of the Vulnerable Software and Affected Versions Swisscom TVMediaHelper version 1.1.0.50 Description The issue exists due to the way .dll files are loaded by the SwisscomTVMediaHelper.exe process, specifically with the handling of several DLLs such as dwmapi.dll, PROPSYS.dll, cscapi.dll,...
CVE-2018-6765: Uncontrolled Search Path Element
Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing...
PT-2018-17722
Name of the Vulnerable Software and Affected Versions MySwisscomAssistant version 2.17.1.1065 Description The issue allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system due to the way .dll files are loaded. This is possible because an attacker can load a .dl...
CVE-2018-6766: Uncontrolled Search Path Element
Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that coul...
IBM Notes DLL Loading Remote Code Execution Vulnerability
IBM Notes for Windows is a set of IBM's Windows-based platform for collaborative office software. The software has e-mail, calendar, scheduling and other office functions. A remote code execution vulnerability exists in IBM Notes for Windows. A remote attacker can cause a user to double-click on ...
Microsoft Windows Installer CVE-2018-0868 DLL Loading Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...
JVN#28865183: Insecure DLL Loading issue in multiple Trend Micro products
Multiple products provided by Trend Micro Incorporated contain an insecure DLL loading issue CWE-427. When invoking the installers of other applications while the concerned products are installed to the PC, the DLL placed in the same directory as the the installers of the other applications may b...
CVE-2018-5457: Uncontrolled Search Path Element
A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The applicatio...
CVE-2018-6318
The CVE-2018-6318 entry applies to Sophos Tester Tool 3.2.0.7 Beta. The vulnerability is a DLL hijacking flaw where the driver loads a DLL from userland (NTDLL.DLL) without validating the DLL’s signature or hash. An attacker could replace the DLL with a malicious one (locally or via remote access...
Windows Defender Advanced Threat Protection で反射型の DLL 読み込みを検出
本記事は、Windows Security のブログ “Detecting reflective DLL loading with Windows Defender ATP” 2017 年 11 月 13 日 米国時間公開...
PT-2017-3561
Name of the Vulnerable Software and Affected Versions: ViPNet Coordinator affected versions not specified Description: The issue is related to the DLL loading mechanism of ViPNet Coordinator, which has insufficient access control. This can be exploited by an attacker to execute arbitrary code wit...
Detecting reflective DLL loading with Windows Defender ATP
Today's attacks put emphasis on leaving little, if any, forensic evidence to maintain stealth and achieve persistence. Attackers use methods that allow exploits to stay resident within an exploited process or migrate to a long-lived process without ever creating or relying on a file on disk. In...