CVE-2017-2270: Untrusted Search Path

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2268

CVE-2017-2268 affects FileCapsule Deluxe Portable and its “Encrypted files in self-decryption format.” The vulnerability is an untrusted search path/ DLL loading issue (CWE-427) that could allow arbitrary code execution by loading a Trojan horse DLL from an unspecified directory, with the attack ...

CVE-2017-2266

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2270

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2265

CVE-2017-2265 affects FileCapsule Deluxe Portable, with vulnerable versions 1.0.4.1 and earlier. The issue is an untrusted search path vulnerability that enables arbitrary code execution by loading a Trojan horse DLL from an unspecified directory, gaining the privileges of the user invoking the a...

CVE-2017-2269

The CVE-2017-2269 issue affects FileCapsule Deluxe Portable Ver.2.0.9 and earlier, described as an untrusted search path vulnerability where a Trojan DLL in an unspecified directory can be loaded to gain privileges. Multiple connected sources indicate this could allow arbitrary code execution wit...

CVE-2017-2266

CVE-2017-2266 concerns FileCapsule Deluxe Portable and its Encrypted Files in Self-Decryption Format. The vulnerability is an untrusted search path that could allow arbitrary code execution via a Trojan horse DLL loaded from an unspecified directory, with impact as described in the CVE records. A...

CVE-2017-2267

Consolidated data confirms CVE-2017-2267 affects FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier and is an untrusted search path vulnerability (CWE-427) where a Trojan horse DLL in an unspecified directory can be loaded to escalate privileges. Affected component is the DLL loading mechanism o...

CVE-2017-2270

The CVE-2017-2270 issue affects FileCapsule Deluxe Portable and its Encrypted files in self-decryption format, with Vulnerability in DLL loading (CWE-427) that can allow arbitrary code execution. Affected versions include FileCapsule Deluxe Portable Ver.2.0.9 and earlier (and related encrypted-se...

PT-2017-15308

Name of the Vulnerable Software and Affected Versions FileCapsule Deluxe Portable versions 1.0.5.1 and earlier Description The issue concerns an untrusted search path vulnerability in encrypted files. This vulnerability can be exploited by an attacker to gain privileges through a Trojan horse DLL...

PT-2017-15309

Name of the Vulnerable Software and Affected Versions FileCapsule Deluxe Portable versions 2.0.9 and earlier Description The issue allows an attacker to gain privileges through a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability. Recommendations For versio...

PT-2017-15305

Name of the Vulnerable Software and Affected Versions FileCapsule Deluxe Portable versions 1.0.4.1 and earlier Description The issue allows an attacker to gain privileges through a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability. Recommendations For...

PT-2017-15307

Name of the Vulnerable Software and Affected Versions FileCapsule Deluxe Portable versions 1.0.5.1 and earlier Description The issue allows an attacker to gain privileges through a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability. Recommendations For...

PT-2017-15310

Name of the Vulnerable Software and Affected Versions FileCapsule Deluxe Portable versions 2.0.9 and earlier Description The issue concerns an untrusted search path vulnerability in encrypted files. This vulnerability can be exploited by an attacker to gain privileges through a Trojan horse DLL i...

PT-2017-15306

Name of the Vulnerable Software and Affected Versions FileCapsule Deluxe Portable versions 1.0.4.1 and earlier Description The issue concerns an untrusted search path vulnerability in encrypted files. This vulnerability allows an attacker to gain privileges by using a Trojan horse DLL in an...

JVN#42031953: FileCapsule Deluxe Portable and Encrypted Files in Self-Decryption Format created by FileCapsule Deluxe Portable may insecurely load Dynamic Link Libraries

FileCapsule Deluxe Portable is a file encryption software. FileCapsule Deluxe Portable contains the following vulnerabilities. FileCapsule Deluxe Portable insecurely load Dynamic Link Libraries CWE-427 - CVE-2017-2265, CVE-2017-2267, CVE-2017-2269 Version| Vector| Score ---|---|--- CVSS v3|...

DEBIAN-CVE-2017-2814

An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file ca...

DEBIAN-CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

[SECURITY] Fedora 25 Update: webkitgtk4-2.16.5-1.fc25

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

The vulnerability of the graphic module of programs for viewing and editing PDF files, such as Adobe Reader, Document Cloud, and Adobe Acrobat, allows attackers to execute arbitrary code.

The vulnerability of graphic modules in PDF viewing and editing programs such as Adobe Reader, Document Cloud, and Adobe Acrobat arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code using JPEG parsing,...