EUVD-2017-4152

Malware in sbrugna...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Design/Logic Flaw

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

CVE-2017-12580

CVE-2017-12580 affects IDM UltraEdit up to 24.10.0.32. The vulnerability is a DLL preloading issue: on unpatched Windows systems, placing a DLL named like a Windows DLL (e.g., ntmarta.dll) in the same directory as the affected installer EXE causes the preloaded DLL in the executable’s current dir...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Design/Logic Flaw

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

CVE-2010-3402

CVE-2010-3402 affects IDM Computer Solutions UltraEdit (notably v16.20.0.1009 and v16.10.0.1036). The vulnerability stems from an untrusted search path that enables DLL hijacking via a Trojan horse dwmapi.dll placed in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak,...