Adobe Framemaker DLL Hijacking Vulnerability

Adobe FrameMaker is a page layout software provided by the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Framemaker 1.0.5.1 and earlier versions. An attacker can exploit this vulnerability to elevate privileges...

Cisco WebEx Network Recording Player ATAS32 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Adobe Releases Security Patch Updates for 11 Vulnerabilities

Adobe has released its monthly security updates to address a total of 11 vulnerabilities in Adobe Digital Editions, Framemaker, and Technical Communications Suite, of which four are rated critical and rest 7 are important in severity. Adobe has also released updated versions for Flash Player, but...

MFC Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that certain applications built using Microsoft Foundation Classes MFC handle the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then insta...

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: October 9, 2018

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: October 9, 2018 Summary A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. To lear...

Fuji Electric Energy Savings Estimator

1. EXECUTIVE SUMMARY CVSS v3 7.3 Vendor: Fuji Electric Equipment: Fuji Electric Energy Savings Estimator Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to load a malicious DLL and execute code on the affected...

JVN#77885134: The installer of Baidu Browser may insecurely load Dynamic Link Libraries

Baidu Browser provided by Baidu, Inc. is a Web browser. The installer of Baidu Browser contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2018-11072

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

Design/Logic Flaw

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

CVE-2018-11072

Dell Digital Delivery prior to version 3.5.1 is affected by a DLL injection vulnerability that can enable a local authenticated attacker, with knowledge of the application workflow, to load and execute a malicious DLL with administrator privileges. The issue stems from how the vulnerable DLL is l...

CVE-2018-11072

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

CVE-2018-6700

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6700

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6700

CVE-2018-6700 corresponds to a DLL Search Order Hijacking vulnerability in McAfee True Key (TK) on Windows Client, prior to version 5.1.165. The root cause is exploitation of DLL search order to load malicious code locally, enabling arbitrary code execution by a local attacker with no credentials...

CVE-2018-6700 True Key (TK) - DLL Search Order Hijacking vulnerability

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

Siemens TD Keypad Designer DLL Hijacking Vulnerability

Siemens TD Keypad Designer is a keyboard design program from Siemens Germany for Siemens TD 100C and other products. A DLL hijacking vulnerability exists in SIEMENS TD Keypad Designer all versions. An attacker could exploit the vulnerability to execute code with the privileges of the user running...

Microsoft Windows Excel Database Driver FORMULA Record Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the msexcl40.d...

Microsoft Windows Excel Database Driver Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the msexcl40.d...

Intel IoT Developers Kit installer DLL injection vulnerability

Intel IoT Developers Kit is an IoT development kit from Intel USA. installer is its installer. A DLL injection vulnerability exists in the installer in Intel IoT Developers Kit 4.0 and earlier versions, which can be exploited by a local attacker to elevate privileges...

CVE-2018-12160

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...