13103 matches found
Remote Symbol Resolution
Introduction The following blog discusses a couple of common techniques that malware uses to obscure its access to the Windows API. In both forms examined, analysts must calculate the API start address and resolve the symbol from the runtime process in order to determine functionality. After...
Microsoft Windows 'olecnv32.dll' Remote Code Execution Vulnerability (KB4025218)
This host is missing a critical security update according to Microsoft KB4025218 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-8487
CVE-2017-8487 affects Microsoft Windows XP and Windows Server 2003. The vulnerability is in Windows OLE, specifically olecnv32.dll, due to improper validation of input embedded in OLE streams/files. An attacker can achieve remote code execution by compelling a user to open a specially crafted fil...
Immunity Canvas: SPECIAL_LNK
Name| speciallnk ---|--- CVE| CVE-2017-8464 Exploit Pack| CANVAS Description| speciallnk Notes| References: 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464', 'http://paper.seebug.org/357/', 'http://www.vxjump.net/files/vulnanalysis/cve-2017-8464.txt' CVE Name:...
Mozilla Firefox < 54.0
The version of Firefox installed on the remote Windows host is prior to 54.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-15 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and...
Mozilla Fixes 32 Vulnerabilities in Firefox 54
Mozilla fixed 32 vulnerabilities, including a critical bug that could have resulted in a crash, with the release Tuesday of Firefox 54, the latest version of its flagship browser. The critical bug, a use-after-free vulnerability, was dug up by longtime bug hunter Nils. The vulnerability...
Cisco AnyConnect Secure Mobility Client < 4.4.02034 Local Privilege Escalation
The version of Cisco AnyConnect Secure Mobility Client installed on the remote Windows host is prior to 4.4.02034. It is, therefore, affected by a local privilege escalation vulnerability due to improper validation of paths and filenames of dynamic-link library DLL files before they are loaded. A...
Microsoft Windows LNK Remote Code Execution Vulnerability (KB4021903)
This host is missing a critical security update according to Microsoft KB4021903 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox < 54 Multiple Vulnerabilities
Binary data 700134.prm...
Microsoft Outlook 2010 Service Pack 2 Multiple Vulnerabilities (KB3203467)
This host is missing an important security update according to Microsoft KB3203467 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Remote Code Execution (KB4018106)
This host is missing an important security update according to Microsoft KB4018106 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. A use-after-free vulnerability when using an incorrect URL during the...
Microsoft Outlook Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft Outlook improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, ...
Microsoft Office remote code execution: May 9, 2017
None None...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, o...
TKY2JGD Installer Untrusted Search Path Vulnerability
TKY2JGD is a coordinate exchange software package released by the Geographical Survey of Japan GSI. An untrustworthy search path vulnerability exists in the installer TKY2JGD1379.EXE in TKY2JGD version 1.3.79. The vulnerability can be exploited to gain privileges via a malicious DLL file in the...
LNK Code Execution Vulnerability
This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain a dynamic icon, loaded from a malicious DLL. This vulnerability is a variant of MS15-020 CVE-2015-0096. The created LNK file is similar except an additional SpecialFolderDataBlock is included. The...
JVN#94771799: Installer of QuickTime for Windows may insecurely load Dynamic Link Libraries
Installer of QuickTime for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Do not use Installer of QuickTime for Windows T...
LNK Code Execution Vulnerability
This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain a dynamic icon, loaded from a malicious DLL. This vulnerability is a variant of MS15-020 CVE-2015-0096. The created LNK file is similar except an additional SpecialFolderDataBlock is included. The...
Sync Breeze 9.7.26 Buffer Overflow
!/usr/bin/python Exploit Title: Sync Breeze v9.7.26 - Local Buffer Overflow Date: 11-06-2017 Exploit Author: @abatchy17 -- www.abatchy.com Vulnerable Software: Sync Breeze v9.7.26 Freeware, Pro and Ultimate Vendor Homepage: http://www.syncbreeze.com Version: 9.7.26 Software Link:...