Setup file of advance preparation untrusted search path vulnerability

Setup file of advance preparation is an installation file for a series of software released by the National Tax Agency NTA of Japan. An untrusted search path vulnerability exists in the Setup file of advance preparation installer. An attacker can exploit this vulnerability to gain privileges via ...

PT-2017-10721 · Audacity Team +1 · Audacity +1

Name of the Vulnerable Software and Affected Versions: Audacity versions 2.1.2 through 2.3.2 Description: The issue allows for arbitrary code execution due to Dll Hijacking in the avformat-55.dll. Recommendations: For Audacity versions 2.1.2 through 2.3.2, consider restricting access to the...

CVE-2017-2232

Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft 4.8A and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2226

Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software WEB version 1.17.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Microsoft IME may insecurely load Dynamic Link Libraries

Overview Microsoft IME, bundled with Microsoft Windows, contains an issue in loading DLLs. When some application programs are invoked, they may initiate Microsoft IME. This IME, when initiated, checks a certain registry key for a file path to a DLL file and loads it. This registry key does not...

Installer of Douro Kouji Kanseizutou Check Program may insecurely load Dynamic Link Libraries

Overview Installer of Douro Kouji Kanseizutou Check Program provided by National Institute for Land and Infrastructure Management contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. and BlackWingCat of Pink...

Installer of Shinseiyou Sougou Soft provided by The Ministry of Justice may insecurely load Dynamic Link Libraries

Overview Installer of Shinseiyou Sougou Soft provided by The Ministry of Justice contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Takashi Yoshikawa of Mitsui Bussan Secure Directions, Inc., Yuji Tounai of NTT Communications...

PatchJGD Installer Untrusted Search Path Vulnerability

PatchJGD is a coordinate exchange software package released by the Japan Geographic Institute GSI. An untrusted search path vulnerability exists in the installer PatchJGD101.EXE in PatchJGD version 1.0.1. An attacker can exploit this vulnerability to gain privileges with a malicious DLL in the...

PatchJGD (Hyoko) Installer Untrusted Search Path Vulnerability

PatchJGD Hyoko is a coordinate exchange software package released by the Japan Geographic Institute GSI. An untrusted search path vulnerability exists in the installer PatchJGDh101.EXE of PatchJGD Hyoko version 1.0.1. The vulnerability can be exploited to gain privileges via a malicious DLL in th...

CVE-2017-2206

Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Installer of Houkokusyo Sakusei Shien Tool provided by Ministry of the Environment may insecurely load Dynamic Link Libraries

Overview Installer of Houkokusyo Sakusei Shien Tool provided by Ministry of the Environment contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Eili Masami of Tachibana Lab. and BlackWingCat of Pink Flying Whale reported this vulnerability to...

Sharp RW-4040 for Windows Untrusted Search Path Vulnerability

Sharp RW-4040 for Windows is a tool for Windows-based IC card readers from Sharp Japan that can be used to verify the execution environment. An untrustworthy search path vulnerability exists in Sharp RW-4040 for Windows version 7 1.2.0.0. An attacker can exploit this vulnerability to gain...

Sharp RW-5100 for Windows untrustworthy search path vulnerability (CNVD-2017-11056)

Sharp RW-5100 for Windows is a Windows-based tool for IC card readers from Sharp Japan that verifies the execution environment. An untrusted search path vulnerability exists in Sharp RW-5100 for Windows 7 version 1.1.0.0 and RW-5100 for Windows 8.1 version 1.2.0.0. An attacker can exploit this...

Tera Term Installer Untrustworthy Search Path Vulnerability

Tera Term is a terminal emulator that supports serial ports, telnet and SSH connections.Installer is the installer of it. An untrustworthy search path vulnerability exists in the installer in Tera Term 4.94 and earlier versions. An attacker can exploit this vulnerability to gain privileges with t...

Huawei HedEx Lite DLL Hijacking Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A DLL hijacking vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00, which originates from accessing a relative path to call a DLL file during HedEx operation. A remote attacker could exploit this...

CVE-2017-7494 Samba remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

5 on 24 May, the Samba official news release, the Samba server software remote code execution vulnerability. An attacker can use the client to specify the library files to upload to have write permissions to the shared directory, will cause the server to load and execute the specified library fil...

Installers of the screensavers provided by JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE may insecurely load Dynamic Link Libraries

Overview Installers of the screensavers provided by JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated wit...

Rapid7 AppSpider Pro DLL Preloading Vulnerability (CNVD-2017-10390)

AppSpider is a DAST solution designed to help application security personnel test applications as part of DevOps and as part of a scheduled scanning program. A DLL preloading vulnerability exists in the Rapid7 AppSpider Pro installer, which can be exploited by an attacker to load a malicious DLL...

CVE-2017-2107

Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerabilities in programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DLL library of OCR plugins for programs that read and edit PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor...