452 matches found
CVE-2017-7327
Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...
DLL Hijacking Vulnerability in FOFA Client
FOFA is a cyberspace asset search engine launched by WhiteHatHub. It can help users quickly match cyber assets and speed up the follow-up process, such as vulnerability impact range analysis, application distribution statistics, application popularity ranking statistics. A DLL hijacking...
QNAP Qsync for Windows DLL Hijacking Vulnerability
QNAP Qsync for Windows exe is a Windows-based application from QNAP Systems for synchronizing files in a QNAP NAS storage device. A DLL hijacking vulnerability exists in QNAP Qsync for Windows exe versions 4.2.2.0724 and earlier. A remote attacker can exploit this vulnerability to execute arbitra...
CVE-2017-8137
HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...
dll hijacking vulnerability in Yisetron Data Security Guard
Yisetong Data Security Guard is a security product that specializes in preventing your private data assets from being illegally stolen or used by others in the process of sharing and storing. A dll hijacking vulnerability exists in Yisetone Data Safeguard. The vulnerability is due to an unsafe...
CVE-2017-5996
The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions...
CVE-2017-11158
Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...
CVE-2017-12480
Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\Local\Temp directory...
CVE-2017-12414
Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...
InternetSoft FTP Commander Untrusted Search Path Vulnerability
InternetSoft FTP Commander is a Windows-based FTP client developed by InternetSoft. A security vulnerability exists in InternetSoft FTP Commander 8.02 and earlier versions. The vulnerability can be exploited by an attacker to hijack a DLL and execute code via a malicious dwmapi.dll file...
PT-2017-10721 · Audacity Team +1 · Audacity +1
Name of the Vulnerable Software and Affected Versions: Audacity versions 2.1.2 through 2.3.2 Description: The issue allows for arbitrary code execution due to Dll Hijacking in the avformat-55.dll. Recommendations: For Audacity versions 2.1.2 through 2.3.2, consider restricting access to the...
CVE-2017-6051
An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of...
Sogou High Speed Browser suffers from dll hijacking vulnerability
Sogou High Speed Browser is a dual-core browser developed by Sogou. A dll hijacking vulnerability exists in Sogou High Speed Browser. The vulnerability is caused due to unsafe loading of library files by the SogouExplorer.exe component of Sogou High Speed Browser. By constructing a malicious...
ABBYY PDF Transformer+ dll Hijacking Vulnerability
ABBYY PDF Transformer+ is a pdf format converter from ABBYY. ABBYY PDF Transformer+'s Transformer.exe component has a dll hijacking vulnerability, due to insecure loading of library files, an attacker can construct a malicious application and place it in a specific path, which allows the...
CVE-2017-3012
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in the OCR plugin...
Mozilla Firefox suffers from dll hijacking vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from a dll hijacking vulnerability, as the firefox.exe component does not securely load library files, an attacker can construct a malicious application and place it in ...
CVE-2017-6033
A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System IGSS Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path...
SCADA engine BACnetOPCServer suffers from dll hijacking vulnerability
SCADA system is a data acquisition and monitoring control system. bacnetOPCServer is the server software for the SCADA engine. The BACnetOPCServer software's BACnSvrTest.exe component is vulnerable to DLL hijacking due to insecure loading of library files, which can be used to maliciously load a...
The vulnerability of the Shockwave Player software platform, which allows a hacker to elevate their privileges
The vulnerability of the Shockwave Player software’s DLL hijacking library is related to the unreliable nature of the process for locating critical resources. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...