JVN#18146081: LoadLibrary function in Microsoft Windows fails to validate input properly

The LoadLibrary function in Microsoft Windows fails to validate input properly. As a result, it may load a specially crafted DLL file CWE-114. Impact An arbitrary code may be executed as a result of an application loads a specially crafted DLL file. Solution Update the Software This issue was...

VMware Horizon Client for windows arbitrary code execution vulnerability (CNVD-2015-03817)

Horizon Client for Windows is used to virtualize desktops and applications. A memory allocation error vulnerability exists in Horizon Client for Windows 'TPView.ddl' that allows remote attackers on the View desktop to execute arbitrary code...

Microsoft Internet Explorer ShowSaveFileDialog Protected Mode Sandbox Escape Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the usage o...

(Pwn2Own) Microsoft Internet Explorer DataView Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within jscript9.dll...

VMware Workstation/Player/Fusion 'TPInt.dll' Denial of Service Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A memory allocation error vulnerability exists in VMware Workstation/Player/Fusion 'TPInt.dll', which allows remote attackers on Guest to conduct denial of service attacks...

KLA10599 Multiple vulnerabilities in Microsoft Products

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Incorrect memory initialization can be exploited...

Audacity 2.0.5 DLL Hijack

A local dll injection vulnerability has been discovered in the official Audacity 2.0.5. Since the program is not specified with a fully qualified path name the program uses a fixed path to look for specific files or libraries. This path includes directories that may not be trusted or under user...

Reflective DLL Injection, Bind IPv6 TCP Stager with UUID Support (Windows x86)

Inject a DLL via a reflective loader. Listen for an IPv6 connection with UUID Support Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 331 include Msf::Payload::Stager...

Lenovo System Update Privilege Escalation Exploit

Exploit for hardware platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit3 'Lenovo System Update Privilege Escalation', 'Description' = %q The named pipe, \SUPipeServer,...

BGA32.DLL and QBga32.DLL contain multiple vulnerabilities

Overview BGA32.DLL is a compression/decompression library for gza and bza-format files. BGA32.DLL contains multiple vulnerabilities including a buffer overflow because it utilizes vulnerable zlib and bzip2 libraries. QBga32.DLL, which is a wrapper of BGA32.DLL, is also affected. KONDOU, Kazuhiro...

Xamarin DLL Hijack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xamarin for Android prior to version 5.1 allows to replace internal DLL files inside the APK with files on SD card which are not in a secure storage. Malicious application without any special permissions could drop backdoored DLL files into...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

Wise-FTP 8.0.2 DLL Hijack

Technical Details & Description: ================================ A local dll injection vulnerability has been discovered in the official Wise-FTP v8.0.2 software. The issue allows local attackers to inject code to vulnerable libraries to compromise the process or to gain higher access privileges...

JVN#78689801: BGA32.DLL and QBga32.DLL contain multiple vulnerabilities

BGA32.DLL is a compression/decompression library for gza and bza-format files. BGA32.DLL contains multiple vulnerabilities including a buffer overflow because it utilizes vulnerable zlib and bzip2 libraries. QBga32.DLL, which is a wrapper of BGA32.DLL, is also affected. Impact Decompressing a...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

Staff-FTP 3.04 DLL Hijack

A local dll injection vulnerability has been discovered in the official Staff-FTP v3.04 software. The issue allows local attackers to inject code to vulnerable libraries to compromise the process or to gain higher access privileges. The windows software is vulnerable to dll hijacking attacks. The...

Reflective DLL Injection, Reverse TCP Stager with UUID Support

Inject a DLL via a reflective loader. Connect back to the attacker with UUID Support This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 329 include Msf::Payload::Stager include...

Reflective DLL Injection, Bind TCP Stager with UUID Support (Windows x86)

Inject a DLL via a reflective loader. Listen for a connection with UUID Support Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 331 include Msf::Payload::Stager include...

Microsoft Visual Basic VBE6.DLL Stack Memory Corruption (MS10-031) - Ver2 (CVE-2010-0815)

Microsoft Visual Basic VBA is a technology for developing client desktop packaged applications and integrating them with existing data and systems. Microsoft Office products include VBA and make use of VBA to perform certain functions. A remote code execution vulnerability has been reported in th...

WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability

Document Title: =============== WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1498 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 149...