CVE-2017-12414

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

InternetSoft FTP Commander Untrusted Search Path Vulnerability

InternetSoft FTP Commander is a Windows-based FTP client developed by InternetSoft. A security vulnerability exists in InternetSoft FTP Commander 8.02 and earlier versions. The vulnerability can be exploited by an attacker to hijack a DLL and execute code via a malicious dwmapi.dll file...

PT-2017-10721 · Audacity Team +1 · Audacity +1

Name of the Vulnerable Software and Affected Versions: Audacity versions 2.1.2 through 2.3.2 Description: The issue allows for arbitrary code execution due to Dll Hijacking in the avformat-55.dll. Recommendations: For Audacity versions 2.1.2 through 2.3.2, consider restricting access to the...

CVE-2017-6051

An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of...

Sogou High Speed Browser suffers from dll hijacking vulnerability

Sogou High Speed Browser is a dual-core browser developed by Sogou. A dll hijacking vulnerability exists in Sogou High Speed Browser. The vulnerability is caused due to unsafe loading of library files by the SogouExplorer.exe component of Sogou High Speed Browser. By constructing a malicious...

ABBYY PDF Transformer+ dll Hijacking Vulnerability

ABBYY PDF Transformer+ is a pdf format converter from ABBYY. ABBYY PDF Transformer+'s Transformer.exe component has a dll hijacking vulnerability, due to insecure loading of library files, an attacker can construct a malicious application and place it in a specific path, which allows the...

CVE-2017-3012

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in the OCR plugin...

Mozilla Firefox suffers from dll hijacking vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from a dll hijacking vulnerability, as the firefox.exe component does not securely load library files, an attacker can construct a malicious application and place it in ...

CVE-2017-6033

A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System IGSS Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path...

SCADA engine BACnetOPCServer suffers from dll hijacking vulnerability

SCADA system is a data acquisition and monitoring control system. bacnetOPCServer is the server software for the SCADA engine. The BACnetOPCServer software's BACnSvrTest.exe component is vulnerable to DLL hijacking due to insecure loading of library files, which can be used to maliciously load a...

The vulnerability of the Shockwave Player software platform, which allows a hacker to elevate their privileges

The vulnerability of the Shockwave Player software’s DLL hijacking library is related to the unreliable nature of the process for locating critical resources. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

CVE-2017-2983

Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...

Skype for Windows Untrustworthy Search Path Vulnerability

Microsoft Skype is a suite of instant messaging software from the American company Microsoft. An untrusted search path vulnerability exists in Microsoft Skype. A local attacker can exploit this vulnerability by executing arbitrary code with the help of the msi.dll, dpapi.dll, or cryptui.dll files...

Scada-os Configuration Software dll Hijacking Vulnerability

Scada-os is a SCADA system developed by several SCADA configuration software engineers. The TsStudio.exe component of the Scada-os configuration software is not safe to load library files, so an attacker can construct a malicious application and place it in a specific path, which will allow the...

Nidesoft MP3 Converter DLL Hijacking Vulnerability

Nidesoft MP3 Converter is a professional tool for MP3 conversion, which can convert video files, MP3 music and many other audio formats. A DLL hijacking vulnerability exists in the quserex.dll file in Nidesoft MP3 Converter version 2.6.18, which can be exploited by local attackers to inject code ...

CodeBlocks DLL Hijacking Vulnerability

CodeBlocks is an open source full-featured cross-platform C/C++ IDE. A DLL hijacking vulnerability exists in CodeBlocks version 12.11, which can be exploited by a local attacker to inject code or gain advanced access...

DLL Hijacking Vulnerability in Kingsoft PPT Beautifier Software

Kingsoft PPT Beautifier is a PPT beautification and creation aid. Kingsoft PPT Beautifier has a DLL hijacking vulnerability, allowing attackers to exploit the vulnerability in the windows2003\windows7 environment, variable relative OFFICE software infection, even if the malicious DLL deleted from...

David Image Viewer DLL Hijacking Vulnerability

David Image Viewer is a powerful digital image viewing, auxiliary processing software. It supports more than 30 popular formats. The software has a typical dll hijacking vulnerability that allows attackers to execute arbitrary code using this vulnerability...

Elipse SCADA DLL Hijacking Vulnerability

Elipse SCADA is a WEB-based SCADA system deployed in critical manufacturing, energy, hydro and other systems. The program suffers from a DLL hijacking vulnerability when loading a DLL pointing to a DLL named wfapi.dll, which could be exploited by an attacker to build a malicious application that,...

Cimon CmnView DLL Hijacking Vulnerability

CmnView is a WEB-based SCADA application. The CmnView application contains a DLL that fails to specify an absolute path, allowing an attacker to exploit the vulnerability to build a malicious application and place it in a specific path, which could allow the application to maliciously load the DL...