Elipse SCADA DLL Hijacking Vulnerability

Elipse SCADA is a WEB-based SCADA system deployed in critical manufacturing, energy, hydro and other systems. The program suffers from a DLL hijacking vulnerability when loading a DLL pointing to a DLL named wfapi.dll, which could be exploited by an attacker to build a malicious application that,...

Apple Mac OS X system is found to exist DLL hijacking vulnerability-vulnerability warning-the black bar safety net

DLL hijacking from 2 0 0 0 years has started to plague Windows systems, and now this attack also in most people's eyes“the most secureoperating system” - Apple Mac OS X appears on the. This week, Synack researcher Patrick Wardle, held in Vancouver at CanSecWest meeting made a speech, he explained...

Cimon CmnView DLL Hijacking Vulnerability

CmnView is a WEB-based SCADA application. The CmnView application contains a DLL that fails to specify an absolute path, allowing an attacker to exploit the vulnerability to build a malicious application and place it in a specific path, which could allow the application to maliciously load the DL...

Mozilla Firefox/Firefox ESR/Thunderbird DLL Load Arbitrary Code Execution Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An arbitrary code execution vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird DLL loading, which can be exploited by an attacker to execute arbitrary code in the context of a user of an affected...

CVE-2014-8396

Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll file that is located in the same folder as the file being processed...

Corel PDF Fusion 'quserex.dll' DLL Load Arbitrary Code Execution Vulnerability

Corel PDF Fusion is a PDF editing and authoring tool. An arbitrary code execution vulnerability exists in Corel PDF Fusion 'quserex.dll' DLL loading due to the program failing to properly load the 'quserex.dll' file. This allows an attacker to construct a malicious DLL file to load arbitrary code...

CorelCAD 'TD_Mgd_3.08_9.dll' DLL Loading Arbitrary Code Execution Vulnerability

CorelCAD is a 3D drawing software. An arbitrary code execution vulnerability exists in CorelCAD 'TDMgd3.089.dll' DLL loading due to CorelCAD failing to properly load the 'TDMgd3.089.dll' file. Allows an attacker to construct a malicious DLL file that loads arbitrary code in the context of the...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Autodesk AutoCAD < 2014 Multiple Vulnerabilities

The remote host has a version of Autodesk AutoCAD installed prior to AutoCAD 2014. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling FAS files that could allow execution of arbitrary VBScript code. CVE-2014-0818 - An error exists relat...

CVE-2014-1273

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library...

Design/Logic Flaw

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library...

CVE-2014-1273

CVE-2014-1273 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue in dyld arises from loading text relocation instructions in dynamic libraries, allowing bypass of code-signing requirements. Apple’s 7.1/6.1 updates address this by ignoring text relocation instructions during dynamic l...

CVE-2014-1273: Improper Input Validation

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library...

GNU C Library: Multiple vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description Multiple vulnerabilities have been discovered in GNU C Library. Please review the CVE identifiers referenced below for details. Impact A local attacker could trigger vulnerabilities in dynamic library...

GLSA-201312-01 : GNU C Library: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-01 GNU C Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GNU C Library. Please review the CVE identifiers referenced below for details. Impact : A local attacker could trigger...

PT-2013-4219 · Microsoft · Windows Xp +10

Name of the Vulnerable Software and Affected Versions: Windows common control library versions in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT Description: A remote code...

PT-2013-3839 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the patchday that contains the fix for this issue Description: The issue is related to the improper implementation of Address Space Layout Randomization ASLR in Windows, allowing attackers to bypass the ASL...

SuSE 11.2 Security Update : glibc (SAT Patch Number 7110)

This collective update for the GNU C library glibc provides the following fixes : - Fix strtod integer/buffer overflows. bnc775690, CVE-2012-3480 - Fix vfprintf handling of many format specifiers. bnc770891, CVE-2012-3404 / CVE-2012-3405 / CVE-2012-3406 - Fix pthreadcondtimedwait stack unwinding...

CVE-2012-5379

Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Python27 or C:\Python27\Scripts directory, which may be added to the PATH syste...

PT-2012-5961 · Activestate · Activepython

Name of the Vulnerable Software and Affected Versions: ActivePython version 3.2.2.3 Description: The installation functionality in ActivePython has an untrusted search path vulnerability. This might allow local users to gain privileges via a Trojan horse DLL in the C:Python27 or C:Python27Scripts...