CVE-2018-6766: Uncontrolled Search Path Element

Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that coul...

Mozilla Firefox/Thunderbird/SeaMonkey Untrusted Search Path Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation.Thunderbird is an email client developed by the Mozilla Foundation that is independent from the Mozilla Application Suite and supports IMAP, POP mail protocols, and HTML mail. Mozilla SeaMonkey is a free, open sourc...

CVE-2017-16690: Untrusted Search Path

A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAPSetup / NwSapSetup.exe loads system DLLs like DWMAPI.dll located in your Syswow64 / System32 folder from the folder the executable is in a...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069: Untrusted Search Path

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the...

CVE-2017-12480

The CVE-2017-12480 entry concerns Sandboxie installer version 5071703 with a DLL hijacking/unsafe DLL loading vulnerability. An attacker could place a malicious dwmapi.dll or profapi.dll in an AppData\Local\Temp directory, leading to code execution when the installer loads the DLL. The issue is d...

CVE-2017-12480: Untrusted Search Path

Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\Local\Temp directory...

Format string

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

CVE-2017-12414

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

CVE-2017-12414

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

CVE-2017-12414

Format Factory 4.1.0 is affected by a DLL hijacking vulnerability caused by untrusted search paths for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll. The Red Hat/CVEs and CNVD entries describe this as allowing a remote attacker to execute code by exploiting the hijack when the vulnerable softwar...

CVE-2017-12414: Untrusted Search Path

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

VIT Spider Player Untrusted Search Path Vulnerability

VIT Spider Player is an audio player that supports audio files in MP3, AAC, WMA, OGG and FLAC formats. A security vulnerability exists in VIT Spider Player version 2.5.3. The vulnerability can be exploited by attackers to hijack DLLs with the help of malicious dwmapi.dll, olepro32.dll, dsound.dll...

Design/Logic Flaw

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

CVE-2017-11749

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

CVE-2017-11749

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

CVE-2017-11748

CVE-2017-11748 affects VIT Spider Player 2.5.3 and is caused by an untrusted search path that enables DLL hijacking through Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll. The vulnerability could allow loading of malicious DLLs, potentially impacting the running process. The c...