DLL Hijacking Vulnerability in Kingsoft PPT Beautifier Software

Kingsoft PPT Beautifier is a PPT beautification and creation aid. Kingsoft PPT Beautifier has a DLL hijacking vulnerability, allowing attackers to exploit the vulnerability in the windows2003\windows7 environment, variable relative OFFICE software infection, even if the malicious DLL deleted from...

About the security content of iCloud for Windows 6.0.1

About the security content of iCloud for Windows 6.0.1 This document describes the security content of iCloud for Windows 6.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

HMI/SCADA software webaccess 7.2/8.0/8.1 has 4 dll hijack vulnerabilities

WebAccess can build an information management platform for users and synchronize the efficiency of vertical market management development. There are 4 dll hijack vulnerabilities in the HMI/SCADA software webaccess, when bwopctool.dll, bwabout.dll, BwPAlarm.dll, and Webvsid.dll are loaded...

[SECURITY] Fedora 23 Update: kf5-kinit-5.24.0-1.fc23

kdeinit is a process launcher somewhat similar to the famous init used for booting UNIX. It launches processes by forking and then loading a dynamic library which s hould contain a 'kdemain...' function...

[SECURITY] Fedora 24 Update: kf5-kinit-5.24.0-1.fc24

kdeinit is a process launcher somewhat similar to the famous init used for booting UNIX. It launches processes by forking and then loading a dynamic library which s hould contain a 'kdemain...' function...

CVE-2016-4831

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerability of the client system of the VMware Horizon View Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPInt.dll library in the VMware Horizon View Client system client involves resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of the client system in the VMware Horizon Client virtualization solution allows users of the guest operating system to trigger a service failure for the host operating system.

The vulnerability of the TPInt.dll library in the VMware Horizon Client client system is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of the Microsoft Office software allows a malicious attacker to execute arbitrary code.

A vulnerability in Microsoft Office software, related to errors in checking the path of dynamically loaded libraries. Exploiting this vulnerability allows a malicious attacker to execute arbitrary code contained in the dynamic library located in the document’s open directory...

The vulnerability of the multimedia player iTunes, which allows a user to elevate their privileges

The vulnerability of the iTunes multimedia player installation program is related to the use of an unreliable search path. Exploiting this vulnerability allows a local attacker to enhance their privileges by using a Trojan DLL in the current working directory...

[SECURITY] Fedora 23 Update: kf5-kinit-5.22.0-3.fc23

kdeinit is a process launcher somewhat similar to the famous init used for booting UNIX. It launches processes by forking and then loading a dynamic library which s hould contain a 'kdemain...' function...

[SECURITY] Fedora 24 Update: kf5-kinit-5.22.0-3.fc24

kdeinit is a process launcher somewhat similar to the famous init used for booting UNIX. It launches processes by forking and then loading a dynamic library which s hould contain a 'kdemain...' function...

About the security content of iTunes 12.4 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of iTunes 12.4

About the security content of iTunes 12.4 This document describes the security content of iTunes 12.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Document Cloud, Adobe Reader, and programs for editing PDF files like Adobe Acrobat, Document Cloud allow attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Document Cloud, and Adobe Acrobat, as well as PDF editing programs like Adobe Acrobat Document Cloud, are related to the use of an insecure search path. Exploiting these vulnerabilities by deploying a Trojan DLL file can allow local...

Flexera InstallShield Untrusted Search Path Vulnerability

Flexera InstallShield is a Windows installation development solution. An untrusted search path vulnerability in Flexera InstallShield 2015 SP1 and prior versions allows local users to gain privileges via a Trojan horse DLL in the current working directory of the launcher executable...

PT-2016-3439

Name of the Vulnerable Software and Affected Versions Flexera InstallShield through 2015 SP1 AVEVA Edge InstallShield affected versions not specified Description The issue is related to an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse DLL in the...

CVE-2016-0016

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL...

OPC Systems.NET Local Privilege Vulnerability

OPC Systems.NET is a complete suite of products from the OPC Foundation of America that provides all . A local elevation of privilege vulnerability exists in OPC Systems.NET 8.00.0023 and earlier versions, which stems from the program failing to properly load a Dynamic Link Library DLL file. An...

Python for Windows may insecurely load dynamic libraries

Overview Python for Windows contains an issue with the DLL search path, which may lead to insecurely loading a DLL called readline.pyd. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...