Foxit Reader < 5.0.2.0718 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 5.0.2.0718. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in how dynamic-link library DLL files are located and loaded, specifically files dwmapi.dll, dwrite.dll, and msdrm.dll. The application...

Citrix Access Gateway Plug-in for Windows ActiveX Control Multiple Vulnerabilities (CTX129902)

The Citrix Access Gateway ActiveX control for Citrix Access Gateway Enterprise Edition is installed on the remote Windows host. It is the ActiveX component of the Citrix Access Gateway Plug-in for Windows and provides an SSL-based VPN via a web browser. The installed version of this control is...

Microsoft Word .docx Insecure Library Loading (MS11-023; CVE-2011-0107)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been reported in the way that Microsoft Word handles the loading of DLL files. The vulnerability is caused when Microsoft Office Word incorrectly restricts the path used for loading external libraries...

flash-plugin: multiple code execution flaws (APSB11-02)

Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

Microsoft Groove 2007 mso.dll Insecure Library Loading (MS11-016; CVE-2010-3146)

Microsoft Office Groove 2007 is a collaboration software program for working on a broad range of project activities, from simple document collaboration to custom solutions integrated with business processes. A remote code execution vulnerability has been reported in the way that Microsoft Groove...

acroread: critical APSB11-03

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and CVE-2011-0588...

ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-02-11-1 ------------------------------------------------------------------------- ASPR 2011-02-11-1: Remote Binary Planting in Adobe Reader...

flash-plugin: multiple code execution flaws (APSB11-02)

Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Cain Abel 2.7.3 - dagc.dll DLL Loading Arbitrary Code Execution

Cain Abel 2.7.3 - dagc.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/46239/info Cain & Abel is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a...

Cain & Abel 2.7.3 - 'dagc.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/46239/info Cain & Abel is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially...

ASPR #2011-01-11-1: Remote Binary Planting in Multiple F-Secure Products

=====BEGIN-ACROS-REPORT===== PUBLIC ======================================================================= ACROS Security Problem Report 2011-01-11-1 ------------------------------------------------------------------------- ASPR 2011-01-11-1: Remote Binary Planting in Multiple F-Secure Products...

Ace Video Workshop 1.2.0.0 - ir50_lcs.dll DLL Loading Arbitrary Code Execution

Ace Video Workshop 1.2.0.0 - ir50lcs.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/45675/info Ace Video Workshop is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Ace Video Workshop 1.2.0.0 - 'ir50_lcs.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/45675/info Ace Video Workshop is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a special...

PT-2010-5202 · Microsoft · Windows Movie Maker

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Movie Maker version 2.6 Description: The issue is related to an untrusted search path vulnerability, which allows local users to gain privileges. This can be achieved by placing a Trojan horse DLL in the current working...

ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...

Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)

This host is missing a critical security update according to Microsoft Bulletin MS10-094. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-095: Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2385678)

The remote Windows host contains a version of Windows BranchCache that incorrectly restricts the path used for loading external libraries. If an attacker can trick a user on the affected system into opening a specially crafted file eg, .eml and .rss Windows Live Mail or .wpost Microsoft Live Writ...

ASPR #2010-11-05-01: Remote Binary Planting in Adobe Flash Player

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-11-05-01 ------------------------------------------------------------------------- ASPR 2010-11-05-01: Remote Binary Planting in Adobe Flash Player...

Microsoft Windows Vista - 'lpksetup.exe oci.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44414/info Microsoft Windows 'lpksetup.exe' is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...