Hashicorp vagrant-vmware-fusion 5.0.1 Local Privilege Escalation

I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairly quickly but unfortunately 5.0.1 is still exploitable with a...

Hashicorp vagrant-vmware-fusion 5.0.0 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits After three CVEs and multiple exploits disclosed to Hashicorp they have finally upped their game with this plugin. Now the previously vulnerable non-root-owned ruby code that get executed as root by the sudo helper is no more and the sudo help...

Hashicorp vagrant-vmware-fusion 5.0.1 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairly quickly but...

Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation

I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairly quickly but unfortunately 5.0.1 is still exploitable with a...

[SECURITY] Fedora 26 Update: calamares-3.1.8-1.fc26

Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...

The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Overview Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. and Shun Suza...

JVN#08517069: The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the...

Cisco Immunet antimalware installer untrustworthy search path vulnerability

Cisco Immunet antimalware is a set of malware protection programs from Cisco USA. installer is one of the installers. An untrusted search path vulnerability exists in the installer of Cisco Immunet antimalware, which results from insufficient input detection of paths and filenames before loading ...

Design/Logic Flaw

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

CVE-2016-6804

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

CVE-2016-6804

Summary: CVE-2016-6804 affects the Windows installer for Apache OpenOffice (pre-4.1.3, including OpenOffice.org branding). The issue stems from a search-path defect where a malicious DLL file in the installation directory can be used to impersonate a dependent DLL, enabling arbitrary code executi...

CVE-2016-6804

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

Error "There is a problem with this Windows Installer package........ Contact your support personnel or package vendor" when Installing Windows Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Installation of Receiver fails with the following error, "There is a problem with this Windows...

PT-2017-9019

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.3 Description The Apache OpenOffice installer for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the...

VMware Workstation DLL Hijacking Vulnerability

VMWare Workstation is a suite of desktop virtualization software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. installer is one of the installation programs. A DLL hijacking vulnerability exists in the installer ...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-4939

CVE-2017-4939 is a DLL hijacking vulnerability in the VMware Workstation installer for 12.x, prior to 12.5.8. The issue arises from improper DLL loading, enabling an attacker to load a DLL of their choosing and potentially execute arbitrary code. Connected advisories also detail related issues (e...

SUSE-SU-2017:3029-1 Security update for ansible and monasca-installer

This update for ansible provides version 2.2.3.0 and fixes the following security issues: - CVE-2017-7481: Data for lookup plugins used as variables was not being marked as 'unsafe' and could lead to unintentional disclosure of information. bsc1038785 - CVE-2016-9587: Prevent compromised host to...

PT-2017-16221

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 12.x through 12.5.7 Description The issue exists due to some DLL files loaded by the application improperly, which may allow an attacker to load a DLL file of their choosing that could execute arbitrary code. This i...

CVE-2017-4939: Untrusted Search Path

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...