CVE-2017-2253

Untrusted search path vulnerability in Installer of Yahoo! Toolbar for Internet explorer v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of Yahoo! Toolbar for Internet explorer v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

UBUNTU-CVE-2017-3080

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

Security feature bypass

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

CVE-2017-3080

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

CVE-2017-2253

CVE-2017-2253 describes an untrusted DLL search path flaw in the Yahoo! Toolbar installer for Internet Explorer (version 8.0.0.6 and earlier). The root cause is insecure DLL loading (CWE-427) via the installer, which can allow arbitrary code execution with the invoking user’s privileges. Public s...

CVE-2017-3080

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

The Magala Trojan Clicker: A Hidden Advertising Threat

One large group will slowly conquer another large group, reduce its numbers, and thus lessen its chance of further variation and improvement. … Small and broken groups and sub-groups will finally tend to disappear. Charles Darwin. 'On the Origin of Species' The golden age of Trojans and viruses h...

flash-plugin: information disclosure issues fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries

Overview Installer of Yahoo! Toolbar for Internet explorer contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

Microsoft Windows Explorer Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Explorer is one of the default browsers that comes with the Windows operating system. A remote code execution vulnerability exists in Explorer in Microsoft Windows. A remote attacker could exploit thi...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-22679)

Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer that could allow an attacker to exploit the vulnerability by presenting a specially crafted web page and tricking the user into parsing it, which could cause the applicati...

Microsoft Windows Explorer Denial of Service Vulnerability

Microsoft Windows is a popular computer operating system. A security vulnerability in the implementation of Microsoft Windows Explorer when attempting to open a non-existent file allows an attacker to exploit the vulnerability by submitting a special request to crash the application...

Microsoft Windows Multiple Vulnerabilities (KB4025337)

This host is missing a critical security update according to Microsoft KB4025337 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-14447)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. Microsoft Internet Explorer fails to properly access memory objects and is implemented with a remote memory...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4025343)

This host is missing a critical security update according to Microsoft KB4025343 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4025342)

This host is missing a critical security update according to Microsoft KB4025342 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Explorer Remote Code Execution Vulnerability (KB4025497)

This host is missing a critical security update according to Microsoft KB4025497 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4025339)

This host is missing a critical security update according to Microsoft KB4025339 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4025344)

This host is missing a critical security update according to Microsoft KB4025344 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...