871 matches found
Design/Logic Flaw
Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading...
Discuz 1.5 storm WEB path vulnerability-vulnerability warning-the black bar safety net
Test environment: discuz X1. 5+nginx 1.0 漏洞 文件 source/function/functioncore.php that Code: $G'setting''domain''app''default' && $content = pregreplace"/a href="^"+"/e", "rewriteoutput'sitedefault', 0, '".$ G'setting''domain''app''default'.$ port.$ G'siteroot'."', '\\1'", $content; Use code:...
CVE-2011-2980
Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...
CVE-2011-0107
Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library...
KLA10246 LPE vulnerability in Lunascape
An untrusted path vulnerability was found in Lunascape. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking. Original advisories - Related products Lunascape CVE list CVE-2011-0452 high Solution Update to latest versi...
Server: use of insecure LD_LIBRARY_PATH settings
The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...
Design/Logic Flaw
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.229 and earlier for Solaris and Linux allows local standalone applications to affect...
rgmanager: insecure library loading vulnerability
The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
OpenOffice.org: soffice insecure LD_LIBRARY_PATH setting
soffice in OpenOffice.org OOo 3.x before 3.3 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3965
The CVE-2010-3965 issue is an Insecure Library Loading (untrusted search path) vulnerability in Windows Media Encoder 9. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, and Windows Server 2008 Gold/SP2. The root cause is that Windows Media Encoder loa...
PHP168 V6. 01/6. 0 2 elevation of privilege and storm the local path vulnerability-vulnerability warning-the black bar safety net
PHP168 whole Station is the PHP field of the current most powerful build system, The code is all open source, can be extremely convenient for secondary development, all modules can be freely installed and removed, individual users completely free to use PHPCMS V6. 0 1 There is a serious security...
Mandriva Update for mono MDVSA-2010:240 (mono)
Check for the Version of mono OpenVAS Vulnerability Test Mandriva Update for mono MDVSA-2010:240 mono Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
KLA10043 LPE vulnerability in 010 Editor
An untrusted path vulnerability was found at 010 Editor. Malicious users can exploit this vulnerability to gain privileges via a DLL hijack. Original advisories Vulnerability description Release note Related products 010-Editor CVE list CVE-2010-5229 high Solution Update to latest version Impacts...
Design/Logic Flaw
Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
CVE-2010-3161
CVE-2010-3161 affects TeraPad (pre-1.00), where unsafe DLL loading due to the DLL search path can be exploited by placing a Trojan DLL in the current working directory. This untrusted search path vulnerability may allow local attackers to execute arbitrary code with the application’s privileges. ...
CVE-2010-3163
CVE-2010-3163 affects Fenrir Sleipnir <= 2.9.4 and Grani
CVE-2010-3160
Archive Decoder ≤1.23 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse executable in the current working directory. The issue arises from insecure loading of executables during file extraction. Affected product is Archive D...
CVE-2010-3164
CVE-2010-3164 affects Fenrir Sleipnir (2.9.4 and earlier) and Grani (4.3 and earlier). The vulnerability is an untrusted search path that may allow a local attacker to gain privileges by placing a Trojan horse executable in the current working directory, enabling arbitrary code execution with the...
