CVE-2019-7962

Adobe Illustrator CC versions 23.1 and earlier are affected by CVE-2019-7962 due to an insecure library loading (DLL hijacking) vulnerability. The underlying issue is loading of malicious libraries from user-writable paths, enabling privilege escalation on a local system. Affected products includ...

CVE-2019-7960

Adobe Animate CC versions 19.2.1 and earlier are affected by CVE-2019-7960 due to an insecure library loading (dll hijacking) vulnerability, enabling local privilege escalation. The root cause is loading external libraries in a way that can be hijacked, leading to elevation of privileges on Windo...

Renren Video pc client software suffers from dll hijacking vulnerability

YYeTs started out as a non-professional subtitle group for foreign film and television programs for the purpose of sharing, exchanging and learning. Formerly known as YYeTs Subtitle Group, it was founded in 2003 by a Canadian-Chinese student, Little Ghost God, who formally set up an independent...

Mickey video pc client software suffers from dll hijacking vulnerability

Migu Video Client is a video software launched by China Mobile to watch various live broadcasts. Migu Video pc client software suffers from a dll hijacking vulnerability, which can be exploited by an attacker to inject a DLL file to execute arbitrary commands...

Lovecraft Universal Player suffers from dll hijacking vulnerability

Aqiyi Universal Player is a mainstream video and audio player developed by Aqiyi official independent research and development, supporting most of the mainstream media formats. There is a dll hijacking vulnerability in Aqiyi Universal Player, which can be exploited by an attacker to execute...

Vulnerability Spotlight: Denial-of-service vulnerability in Intel IGC64 graphics driver

Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Intel’s IGC64.dll graphics driver contains a denial-of-service vulnerability. An attacker could exploit this bug by supplying a malformed pixel shader if the graphics driver is operating inside a VMware guest operating...

Adobe Illustrator DLL Hijacking Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms, which can be exploited by attackers to elevate privileges...

Intel IGC64.DLL shader functionality DCL_INDEXABLE_TEMP denial-of-service vulnerability

Summary An exploitable memory corruption vulnerability exists in Intel’s IGC64.DLL graphics driver, versions 26.20.100.6709 and 26.20.100.6861. A specially crafted pixel shader can cause an out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this...

CVE-2019-5695

NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...

Design/Logic Flaw

NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...

CVE-2019-5695

The CVE-2019-5695 issue concerns NVIDIA GeForce Experience (pre-3.20.1) and Windows GPU Display Driver across all versions, where the local service provider component improperly loads Windows system DLLs without path/signature validation (a DLL preloading/binary planting flaw). This can enable a ...

CVE-2019-5695

NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...

CVE-2019-1420

An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1422, CVE-2019-1423...

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Media Foundation

Marcin Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Microsoft Media Foundation’s framework contains a remote code execution vulnerability that exists due to a use-after-free condition. This specific bug lies in Media Foundation's MPEG4 DLL. An attacker could provide a...

Adobe Animate CVE-2019-7960 DLL Loading Local Privilege Escalation Vulnerability

Description Adobe Animate is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Animate 19.2.1 and prior are vulnerable. Technologies Affected Adobe Animate 14.2.0.20 Adobe Animate 15.0.0.173 Adobe Animate 15.0.1.179 Adobe...

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka ‘Windows Installer Elevation of Privilege...

Valve: [Portal 2] Remote Code Execution via voice packets

Description RCE can be achieved on other players via voice packets due to the lack of length validation when reading into a stack based buffer. POC 1. As the victim, invite the attacker into a game. 2. Wait until both players have loaded into the game. 3. Inject the following DLL into the attacke...

DLL Search Path and Symbolic Link Vulnerabilities - Lenovo Support US

No description provided...

CVE-2019-5701

NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature also known as a binary planting or DLL preloading attack,...

CVE-2019-5694

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, which may lead to denial of service or...