1276 matches found
Zhejiang Dahua Playback Library SDK suffers from an out-of-bounds access vulnerability
Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...
Sony Interactive Entertainment Content Manager Assistant for PlayStation untrustworthy search path vulnerability
Sony Interactive Entertainment Content Manager Assistant for PlayStation is a content management program for PlayStation by Sony Interactive Entertainment Japan. The program is used to transfer data between PlayStation Vita and PlayStation TV systems. An untrustworthy search path vulnerability...
The installer of Content Manager Assistant for PlayStation may insecurely load Dynamic Link Libraries
Overview Content Manager Assistant for PlayStation provided by Sony Interactive Entertainment Inc. is a data transfer tool. The installer of Content Manager Assistant for PlayStation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427...
Trend Micro Encryption for Email DLL Loads Remote Code Execution Vulnerability
Trend Micro Encryption for Email is a suite of encryption technologies for email from Trend Micro. A security vulnerability exists in Trend Micro Encryption for Email version 5.6. A remote attacker could exploit the vulnerability to execute arbitrary code on an affected system...
CVE-2017-11397
A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system...
CVE-2017-16690
A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAPSetup / NwSapSetup.exe loads system DLLs like DWMAPI.dll located in your Syswow64 / System32 folder from the folder the executable is in a...
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
Overview The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems J-LIS contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Note that...
Amazon Audible Software DLL Load Local Elevation of Privilege Vulnerability
Amazon Audible for Windows is a Windows-based audiobook application from Amazon.com. A security vulnerability exists in the ActiveSetupN.exe file in Amazon Audible for Windows-based platforms. An attacker can exploit the vulnerability to execute arbitrary DLL code...
Sony Media Go Untrustworthy Search Path Vulnerability
Sony Media Go is a multimedia application from Sony Japan. The program supports audio and video playback, picture viewing and games. An untrustworthy search path vulnerability exists in Sony Media Go 3.2.0.191 and earlier versions. An attacker can exploit this vulnerability to gain privileges wit...
Sony Music Center for PC Untrustworthy Search Path Vulnerability
Sony Music Center for PC is a PC-based music player from Sony Japan. An untrusted search path vulnerability exists in Sony Music Center for PC version 1.0.00. The vulnerability can be exploited to gain privileges via a malicious DLL in a directory...
CVE-2017-10891
Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-8137
HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...
Design/Logic Flaw
HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...
CVE-2017-8137
HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...
CVE-2017-8137: Untrusted Search Path
HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...
Cisco Immunet antimalware installer untrustworthy search path vulnerability
Cisco Immunet antimalware is a set of malware protection programs from Cisco USA. installer is one of the installers. An untrusted search path vulnerability exists in the installer of Cisco Immunet antimalware, which results from insufficient input detection of paths and filenames before loading ...
Cisco FindIT Network Discovery Utility Local Arbitrary Code Execution Vulnerability
Cisco FindIT Network Discovery Utility is a network device manager from Cisco USA. The product provides management functions for Cisco network devices. A local arbitrary code execution vulnerability exists in Cisco FindIT Network Discovery Utility that originates when the program loads a maliciou...
CVE-2016-6804
The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...
CVE-2017-4939
VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...