CVE-2017-2247

CVE-2017-2247 concerns Lhaz self-extracting archive files created by Lhaz 2.4.0 and earlier. The vulnerability is an untrusted search path that can be exploited to gain privileges via a Trojan horse DLL located in an unspecified directory. Documents indicate that self-extracting archives and inst...

CVE-2017-2249

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2246

The CVE-2017-2246 entry concerns Lhaz Installer (version 2.4.0 and earlier). The vulnerability is an untrusted search path that allows an attacker to gain privileges by placing a Trojan DLL in an unspecified directory, enabling arbitrary code execution with the invoking user’s privileges via the ...

Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries

Overview AttacheCase is an open source file encryption software provided by HiBARA Software. It can also create self-extracting encrypted files. Self-extracting encrypted files created by AttacheCase contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link...

CVE-2017-1000010

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution...

CVE-2017-1000010

Audacity 2.1.2–2.3.2 is affected by a DLL hijacking vulnerability in avformat-55.dll that can lead to arbitrary code execution. The root cause is loading a malicious DLL due to improper handling of library paths, enabling an attacker to execute code with the application’s privileges. Affected ver...

CVE-2017-1000010

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution...

PT-2017-10721 · Audacity Team +1 · Audacity +1

Name of the Vulnerable Software and Affected Versions: Audacity versions 2.1.2 through 2.3.2 Description: The issue allows for arbitrary code execution due to Dll Hijacking in the avformat-55.dll. Recommendations: For Audacity versions 2.1.2 through 2.3.2, consider restricting access to the...

Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries

Overview Installer of Yahoo! Toolbar for Internet explorer contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

JVN#02852421: Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries

Installer of Yahoo! Toolbar for Internet explorer contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the Latest Installer Use the...

360 Total Security - Local Privilege Escalation

360 Total Security - Local Privilege Escalation Vulnerability Summary The following advisory describes an Privileged Escalation vulnerability found in 360 Total Security. 360 Total Security offers your PC complete protection from Viruses, Trojans and other emerging threats. Whether you are shoppi...

360 Total Security - Local Privilege Escalation

Vulnerability Summary The following advisory describes an Privileged Escalation vulnerability found in 360 Total Security. 360 Total Security offers your PC complete protection from Viruses, Trojans and other emerging threats. Whether you are shopping online, downloading files or chatting with yo...

JVN#81676004: Installers of Mozilla Firefox and Thunderbird for Windows may insecurely load Dynamic Link Libraries

Installers of Mozilla Firefox and Thunderbird for Windows provided by Mozilla Foundation contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...

Douro Kouji Kanseizutou Check Program Untrusted Search Path Vulnerability

Douro Kouji Kanseizutou Check Program is a program for checking as-built drawings for road construction issued by the National Institute for Land and Infrastructure Management NILIM in Japan. An untrustworthy search path vulnerability exists in Douro Kouji Kanseizutou Check Program 3.1 and earlie...

JVN#29939155: Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries

File Compact provided by SOURCENEXT CORPORATION is compression/decompression software. It can also create self-extracting archive files. Self-extracting archive files created by File Compact contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

Douroshisetu Kihon Data Sakusei System Untrusted Search Path Vulnerability

Douroshisetu Kihon Data Sakusei System is a basic data creation system for road facilities released by the National Institute for Land and Infrastructure Management in Japan. An untrustworthy search path vulnerability exists in Douroshisetu Kihon Data Sakusei System 1.0.2 and earlier versions. An...

Microsoft .NET Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Hi @ll, all versions of .NET Framework support to load a COM object as code profiler, enabled via two or three environment variables. From | A profiler DLL is an unmanaged DLL that runs as part of the | common language runtime execution...

CVE-2017-2232

Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft 4.8A and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2233

Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin G2.30 and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2231

Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till Jun...