Microsoft Windows DLL Load Local Elevation of Privilege Vulnerability

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is a set of operating systems for personal computers and the latter is a server operating system. Microsoft Windows DLL Load Local Elevation of Privilege vulnerability. A remote attacker could...

Cisco Meeting App Elevation of Privilege Vulnerability

Cisco Meeting App for Windows is a Windows-based video conferencing software client from the U.S. company Cisco Cisco. An elevation of privilege vulnerability exists in the Cisco Meeting App for Windows for loading the DLL file routine, which results from the program failing to perform sufficient...

CVE-2017-13993

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path...

Cisco FindIT Network Discovery Utility Code Execution Vulnerability

Cisco FindIT Network Discovery Utility is a network device manager from Cisco USA. The product provides management functions for Cisco network devices. A security vulnerability exists in the Cisco FindIT Network Discovery Utility. A local attacker can exploit this vulnerability by placing an...

Digital Arts i-filter install program untrustworthy search path vulnerability

Digital Arts i-filter is a parental control web filtering software from Digital Arts Japan. install program is one of the installation programs. An untrusted search path vulnerability exists in Digital Arts i-filter version 6.0 in the install program 1.0.8.1 and earlier. The vulnerability can be...

Digital Arts i-filter untrustworthy search path vulnerability

Digital Arts i-filter is a parental control web filter from Digital Arts Japan. installer is one of the installers. An untrusted search path vulnerability exists in the installer of Digital Arts i-filter version 6.0. The vulnerability can be exploited to gain privileges via a malicious DLL in the...

CVE-2017-12252

A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...

CVE-2017-14567

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnregisterServer+0x000000000002e77b."...

CVE-2017-14397

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability...

NTT DoCoMo Photo Collection PC Software Untrustworthy Search Path Vulnerability

NTT DoCoMo Photo Collection PC Software is a set of photo collection software from NTT DoCoMo Japan. An untrusted search path vulnerability exists in NTT DoCoMo Photo Collection PC Software 4.0.2 and earlier versions. A remote attacker can exploit this vulnerability to gain privileges via a...

Flets Setsuzoku Tool for Windows Untrusted Search Path Vulnerability

Flets Setsuzoku Tool for Windows is a configuration tool for Internet connection from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Flets Setsuzoku Tool for Windows. The vulnerability can be exploited by a remote attacker to gain privileges via a...

Security Setup Tool Untrusted Search Path Vulnerability

Security Setup Tool is a security setup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Security Setup Tool. The vulnerability can be exploited by a remote attacker to gain privileges via a malicious DLL file in a directory...

Remote Support Tool Untrusted Search Path Vulnerability

Remote Support Tool Enkaku Support Tool is an Enkaku support tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrustworthy search path vulnerability exists in versions of Remote Support Tool prior to August 10, 2017 . An attacker can exploit this vulnerability to gain privileges with the...

Fuji Xerox DocuWorks Search Path Handling Elevation of Privilege Vulnerability

Fuji Xerox DocuWorks is a document management solution. A security vulnerability in the Self-extracting document processing search path generated by Fuji Xerox DocuWorks allows remote attackers to exploit the vulnerability by submitting a specially crafted DLL, which can be tricked into being...

AzeoTech DAQFactory Uncontrolled Search Path Element Vulnerability

AzeoTech DAQFactory is an HMI/SCADA software. AzeoTech DAQFactory suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute a malicious DLL file that has been placed in the search path...

Installer of Optimal Guard may insecurely load Dynamic Link Libraries

Overview Installer of Optimal Guard provided by OPTiM Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

Installer of "Security Kinou Mihariban" may insecurely load Dynamic Link Libraries

Overview Installer of "Security Kinou Mihariban" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

Installer of Photo Collection PC Software provided by NTT DOCOMO, INC. may insecurely load Dynamic Link Libraries and invoke executable files

Overview Photo Collection PC Software provided by NTT DOCOMO, INC. contains an issue with the search paths for DLL/executable files, which may lead to insecurely loading Dynamic Link Libraries and invoking executable files CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA...

Qua station connection tool untrusted search path vulnerability

KDDI Qua station connection tool for windows is a Windows-based Qua station a storage device connection tool from KDDI Japan for file transfer between smartphones and Qua station devices. An untrusted search path vulnerability exists in the installer in version 1.00.03 of the Qua station connecti...

CVE-2017-2289

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...