CVE-2017-11397

A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system...

CVE-2017-16690

A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAPSetup / NwSapSetup.exe loads system DLLs like DWMAPI.dll located in your Syswow64 / System32 folder from the folder the executable is in a...

The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries

Overview The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems J-LIS contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Note that...

Amazon Audible Software DLL Load Local Elevation of Privilege Vulnerability

Amazon Audible for Windows is a Windows-based audiobook application from Amazon.com. A security vulnerability exists in the ActiveSetupN.exe file in Amazon Audible for Windows-based platforms. An attacker can exploit the vulnerability to execute arbitrary DLL code...

Sony Music Center for PC Untrustworthy Search Path Vulnerability

Sony Music Center for PC is a PC-based music player from Sony Japan. An untrusted search path vulnerability exists in Sony Music Center for PC version 1.0.00. The vulnerability can be exploited to gain privileges via a malicious DLL in a directory...

Sony Media Go Untrustworthy Search Path Vulnerability

Sony Media Go is a multimedia application from Sony Japan. The program supports audio and video playback, picture viewing and games. An untrustworthy search path vulnerability exists in Sony Media Go 3.2.0.191 and earlier versions. An attacker can exploit this vulnerability to gain privileges wit...

CVE-2017-10891

Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-8137

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

Design/Logic Flaw

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

CVE-2017-8137

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

Cisco FindIT Network Discovery Utility Local Arbitrary Code Execution Vulnerability

Cisco FindIT Network Discovery Utility is a network device manager from Cisco USA. The product provides management functions for Cisco network devices. A local arbitrary code execution vulnerability exists in Cisco FindIT Network Discovery Utility that originates when the program loads a maliciou...

Cisco Immunet antimalware installer untrustworthy search path vulnerability

Cisco Immunet antimalware is a set of malware protection programs from Cisco USA. installer is one of the installers. An untrusted search path vulnerability exists in the installer of Cisco Immunet antimalware, which results from insufficient input detection of paths and filenames before loading ...

CVE-2016-6804

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-10885

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

HYPER SBI Untrustworthy Search Path Vulnerability

SBI SECURITIES HYPER SBI is an online trading tool for stock securities provided by SBI SECURITIES in Japan. An untrustworthy search path vulnerability exists in SBI SECURITIES HYPER SBI 2.2 and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a...

Installer of HYPER SBI may insecurely load Dynamic Link Libraries

Overview HYPER SBI provided by SBI SECURITIES Co.,Ltd. is a trading tool. Installer of HYPER SBI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuto Iso of NTT Security Japan KK reported this vulnerability to IPA. JPCERT/CC...

FFlets Easy Setup Tool Installer Untrusted Search Path Vulnerability

Flets Easy Setup Tool is a Flets easy setup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan.Installer is one of the installation programs. An untrusted search path vulnerability exists in the Installer in Flets Easy Setup Tool 1.2.0 and earlier versions. An attacker can exploit this...

Trihedral Engineering Limited VTScada DLL Hijacking Vulnerability

VTScada is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. Trihedral Engineering Limited VTScada suffers from a DLL hijacking vulnerability that could allow an attacker to cause the program to execute a specially crafted malicious dll fi...

Multiple Sony products untrustworthy search path vulnerability

Sony NFC Port Software and others are products of Sony Japan.Sony NFC Port Software is a set of NFC interface software.PC/SC Activator for Type B is a Type B interface support software. An untrusted search path vulnerability exists in multiple Sony products. A remote attacker can exploit this...