Synaptics Pointing Device Driver Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-24573 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-16098 Summary Description: A researcher reported to Lenovo an unquoted search path vulnerability was found in Synaptics Pointing Device drivers of some...

CVE-2018-16182

Untrusted search path vulnerability in the installer of MARKET SPEED Ver.16.4 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16176

Untrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16177

Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measures tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16182

Untrusted search path vulnerability in the installer of MARKET SPEED Ver.16.4 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0667

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0667

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measures tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16176

The CVE-2018-16176 entry concerns the Japan Atomic Energy Agency’s Mapping Tool installer (versions 2.0.1.6 and 2.0.1.7). The root cause is an insecure DLL search path in the installer, enabling a Trojan horse DLL to be loaded from an unspecified directory. This may allow arbitrary code execution...

CVE-2018-16177

The CVE-2018-16177 issue affects the Windows 10 Fall Creators Update: Modify module for Security Measures tool, where the installer may load an attacker-controlled DLL due to a insecure DLL search path (CWE-427). This can allow arbitrary code execution with the privileges of the user invoking the...

CVE-2018-16176

Untrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16182

Untrusted search path vulnerability in the installer of MARKET SPEED Ver.16.4 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16183

CVE-2018-16183 details an unquoted service path vulnerability in Panasonic PCs with pre-installed applications running Windows 7/8/8.1/10 (from Oct 2009 onward). The root cause is services started with unquoted file paths (CWE-428), which could allow local attackers to execute a Trojan horse exec...

CVE-2018-0667

CVE-2018-0667 involves an untrusted search path vulnerability in the installer components of INplc SDK Express 3.08 and earlier and INplc SDK Pro+ 3.08 and earlier. The root cause is a DLL preloading issue that allows an attacker to gain arbitrary code execution with the privileges of the user in...

CVE-2018-16177

Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measures tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16182

CVE-2018-16182 concerns an untrusted DLL search path in the installer for MARKET SPEED, affecting Ver.16.4 and earlier. The root cause is insecure DLL loading (CWE-427) that can allow arbitrary code execution with the invoking user’s privileges. Public sources in the connected documents confirm t...

CVE-2018-1888

An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079...