1060 matches found
CVE-2011-5154
Multiple untrusted search path vulnerabilities in 1 SAPGui.exe and 2 BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these...
PT-2012-2230 · Microsoft · Qdvd.Dll +7
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...
DVR Remote ActiveX code execution
It's possible to load dynamic library via DVRobot.DLL...
Wireshark multiple security vulnerabilities
DoS on different protocols dissectors, unsafe dynamic library loading...
GTK+ may insecurely load dynamic libraries
Overview GTK+ may use unsafe methods for determining how to load DLLs. GTK+ is a toolkit for developing applications with GUIs. GTK+ contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Naoto Katsumi of LAC Co., Ltd. reported this vulnerability to IP...
UBUNTU-CVE-2011-3012
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...
CVE-2011-1705
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url...
Low: Red Hat Security Advisory: rgmanager security and bug fix update
An updated rgmanager package that fixes multiple security issues and several bugs is now available for Red Hat Cluster Suite 4. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...
PT-2010-5200 · Microsoft · Windows Server 2003 +4
Name of the Vulnerable Software and Affected Versions: Windows Media Encoder 9 versions on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 Description: The issue allows local users to gain privileges via a Trojan horse DLL...
TeraPad may insecurely load dynamic libraries
Overview TeraPad may use unsafe methods for determining how to load DLLs. TeraPad is a text editor. TeraPad loads certain DLL's when TXT files are opened. TeraPad contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Makoto Shiotsuki reported this...
CVE-2010-3190
Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...
VulnCheck KEV: CVE-2007-2987
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the 1 DebugMsgLog or 2 DoFileProperties methods...
Oracle Sun Java WebStart code execution
Characters injection during javaws/javaws.exe launch allows dynamic library execution in specified location...
Apache mod_isapi uninitialized pointer function call
Uunder some conditions function from dynamic library is called by it's address after library is unloaded...
3 6 0 security guards bregdrv. sys and bregdll. dll file local privilege escalation exploit.-vulnerability warning-the black bar safety net
3 6 0 Security Defender is in China, the widely used free Internet security software. 3 6 0 security guards in the installation process on the user's system to install a registry operation program, the program can be used to bypass theoperating systemthe security check mechanism of any operation...
Windows print spooler multiple security vulnerabilities
Buffer overflow, unauthorized files access, privilege escalation with dynamic library loading...
FreeBSD : cyrus-sasl -- dynamic library loading and set-user-ID applications (92268205-1947-11d9-bc4a-000c41e2cdad)
The Cyrus SASL library, libsasl, contains functions which may load dynamic libraries. These libraries may be loaded from the path specified by the environmental variable SASLPATH, which in some situations may be fully controlled by a local attacker. Thus, if a set-user-ID application such as chsh...
MySQL dynamic functions loading vulnerability
It's possible to load dynamic library from any location; functions are still available after library is unloaded...
MySQL 4.0.17 UDF Dynamic Library Exploit
No description provided by source. / $Id: raptorudf.c,v 1.1 2004/12/04 14:44:39 raptor Exp $ raptorudf.c - dynamic library for dosystem MySQL UDF Copyright c 2004 Marco Ivaldi [email protected] This is an helper dynamic library for local privilege escalation through MySQL run with root...