CVE-2019-8801

The CVE-2019-8801 entry describes a dynamic library loading issue in iTunes setup addressed by improved path searching. Affected products include macOS Catalina 10.15.1 and iTunes for Windows 12.10.2; running the iTunes installer from an untrusted directory could lead to arbitrary code execution....

PT-2019-19227

Name of the Vulnerable Software and Affected Versions iTunes for Windows versions prior to 12.10.2 macOS Catalina versions prior to 10.15.1 Description A dynamic library loading issue existed in iTunes setup, which could result in arbitrary code execution if the iTunes installer was run in an...

CVE-2019-8801: Untrusted Search Path

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

DLL Hijacking Vulnerability in WeChat PC Client

WeChat is a chatting and socializing software from Shenzhen Tencent Computer System Co. A DLL hijacking vulnerability exists in the WeChat PC client, which can be exploited by attackers to execute malicious code...

CVE-2019-15628

Trend Micro Security Consumer 2020 v16.0.1221 and below is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started...

YY v8.54.00 suffers from a DLL hijacking vulnerability

YY belongs to Guangzhou Huado Network Technology Co., Ltd. and is an interactive live broadcasting platform for all people's entertainment. YY v8.54.00 suffers from a DLL hijacking vulnerability. An attacker can exploit the vulnerability to execute arbitrary code...

DLL Hijacking Vulnerability in Arigatou Cloud Notes v6.9.4.0

Youdao Cloud Notes 原有道笔记 is an online library for individuals and teams launched on June 28, 2011 by NetEase's Youdao. A DLL hijacking vulnerability exists in Youdao Cloud Notes v6.9.4.0. An attacker can exploit the vulnerability to execute arbitrary code...

Microchat v1.0.3.20 suffers from DLL hijacking vulnerability

Microchat is a new IM instant messaging chat program. Microchat v1.0.3.20 suffers from a DLL hijacking vulnerability. An attacker can exploit the vulnerability to execute arbitrary movement...

DLL Hijacking Vulnerability in VV Video Community

VV Video Community is an online audiovisual entertainment platform. VV Video Community suffers from a DLL hijacking vulnerability. An attacker can exploit the vulnerability to execute arbitrary code...

Swift CAD Editor suffers from dll hijacking vulnerability

Swift CAD Editor is a CAD drawing editing software by ... Swift CAD Editor suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Xunjie CAD Viewing Software installer is vulnerable to dll hijacking

Xunjie CAD viewing software is a CAD drawing viewing tool, can be detached from the AutoCAD environment on the DWG, DXF files for fast browsing. A dll hijacking vulnerability exists in the installation program of Xunjie CAD Viewer. An attacker can exploit the vulnerability to execute arbitrary co...

DLL Hijacking Vulnerability in Jingmai PC Client Software

Jingmai Workbench PC Version, Jingmai Workbench PC Version is a seller management tool for Jingdong Mall. Jingmai pc client software DLL hijacking vulnerability, an attacker can use the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

DLL Hijacking Vulnerability in Knock Knock pc Client Software

Jingdongdong is the official communication platform between customers, merchants and Jingdong, providing a channel for customers and merchants to give feedback. A DLL hijacking vulnerability exists in the Knockturn pc client software, which can be exploited by an attacker to inject an executable...

Hefeixin pc client in DLL hijacking vulnerability

Fetion PC Stable Edition is a new version of the PC client software based on the previous Fetion, and Fetion PC Stable Edition is a basic communication service software developed by China Mobile. And Fetion pc client in the DLL hijacking vulnerability, attackers can use the vulnerability in the...

Comodo Internet Security DLL Preload Vulnerability

Comodo Internet Security CIS is an Internet security suite that includes an antivirus program, personal firewall, sandbox, and host-based intrusion prevention system HIPS. A DLL preloading vulnerability in signmgr.dll 6.5.0.819 in Comodo Internet Security 12.0 and earlier can be exploited to bypa...

CVE-2019-7962

Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Fengxing video pc client software has dll hijacking vulnerability

Fengxing Video pc client is a free video playback software, which is an integrated HD movie and TV viewing software for online viewing and downloading. Fengxing Video pc client software has a dll hijacking vulnerability, which can be exploited by attackers to inject executable DLL files and execu...

QQ Video pc client software suffers from dll hijacking vulnerability

QQ Video is a local player from Tencent that supports movie and music files in any format. QQ Video pc client software suffers from a dll hijacking vulnerability, which can be exploited by attackers to inject DLL files and execute arbitrary commands...

Sohu Video pc client software suffers from dll hijacking vulnerability

Sohu Video is a new experience video acceleration player launched by Sohu Video. Support for local mainstream audio and video media format playback, support for online video on demand and nearly 100 satellite TV and local stations live. Sohu Video pc client software dll hijacking vulnerability,...

The vulnerability of the “ARM Relayer” and “Configurator” software components of the EKRASMS-SP suite of programs, related to the loading of a non-existent dynamic library, allows a violator to execute arbitrary code.

The vulnerability of the “ARM Relay Operator” and “Configurator” software components of the EKRASMS-SP suite lies in the loading of a nonexistent dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code using the specially crafted dynamic library...