RW-5100 driver installer may insecurely load Dynamic Link Libraries

Overview RW-5100 driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation and BlackWingCat of PinkFlyingWhale reporte...

Installer of Tera Term may insecurely load Dynamic Link Libraries

Overview The installer of Tera Term provided by TeraTerm Project contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informati...

Intel SSD Toolbox dll Hijacking Vulnerability

Intel SSD Toolbox is a set of solid state drive inspection tools from Intel USA. A dll hijacking vulnerability exists in Intel SSD Toolbox version 3.4.3, which can be exploited by constructing a malicious application and placing it in a specific path to maliciously load and execute a DLL...

Shogyo Touki Denshi Ninsho Software Untrusted Search Path Vulnerability

Shogyo Touki Denshi Ninsho Software is an electronic authentication software for business registration. An untrusted search path vulnerability exists in the installer of Shogyo Touki Denshi Ninsho Software version 1.7 and earlier. The vulnerability can be exploited to gain privileges via a...

CVE-2016-4900

Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

Schneider Electric SoMachine HVAC Arbitrary Code Execution Vulnerability

SoMachine HVAC is PLC programming software. An arbitrary code execution vulnerability exists in Schneider Electric SoMachine HVAC. The vulnerability stems from a failure to properly load a DLL file and could be exploited by an unauthenticated attacker to execute arbitrary code on the target syste...

CVE-2017-6051

An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of...

CVE-2017-2130

Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerability of programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, allows a malicious actor to execute the application with privileges of the current user.

The vulnerability of the DLL library used by programs for viewing and editing PDF files in Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to execute t...

Multiple JustSystems products including Hanako may insecurely load Dynamic Link Libraries

Overview Hanako and multiple software suites containing Hanako provided by JustSystems Corporation contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Eiji James Yoshida of Security Professionals Network Inc. reported this vulnerability to IPA...

Baidu Browser suffers from dll hijacking vulnerability

Baidu Browser is a browser. Baidu Browser suffers from a dll hijacking vulnerability, which is caused by the baidubrowser.exe component in Baidu Browser loading library files insecurely, which can be exploited by constructing a malicious application and placing it in a specific path to maliciousl...

Microsoft OneNote DLL Loading RCE Vulnerability (KB2589382)

This host is missing an important security update for Microsoft OneNote according to Microsoft security update KB2589382. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-3013

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in a DLL related to remote logging...

Microsoft OneNote DLL Loading RCE Vulnerability (KB3191829)

This host is missing an important security update according to Microsoft security updates KB3191829. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mozilla Firefox suffers from dll hijacking vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from a dll hijacking vulnerability, as the firefox.exe component does not securely load library files, an attacker can construct a malicious application and place it in ...

Schneider Electric Interactive Graphical SCADA DLL Load Remote Code Execution Vulnerability

Schneider Electric Interactive Graphical SCADA System Software is a suite of automation software for process control and supervision of SCADA systems from the French company Schneider Electric SchneiderElectric. A DLL loading remote code execution vulnerability exists in Schneider Electric...

Microsoft Office DLL Loading (CVE-2017-0197)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused due to an incorrect link to a dynamic-link library file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file which will lead to arbitrary code execution...

Huawei HiSuite DLL Hijacking Vulnerability

Vulnerability Description: Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A DLL hijacking vulnerability exists in Huawei HiSuite version 4.0.5.300OVE due to the program's lack of checking for loaded system DLL files. An attacker can exploit this vulnerability ...

CVE-2016-8274

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

AppSamvid DLL Load Native Code Execution Vulnerability

AppSamvid is a C-DAC application whitelisting software for Microsoft Windows based operating systems. Whitelisting allows only pre-approved files to be executed on the operating system. This is in contrast to traditional signature-based antivirus software methods that blacklist virus files. A loa...