CVE-2019-12569

A vulnerability in Viber before 10.7.0 for Desktop Windows could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI. An attacker could exploit this vulnerability by convincing a targeted user to follow...

Yandex Browser installer for Desktop DLL Hijacking Vulnerability

Yandex Browser is a free Chromium-based web browser developed by Russian web search company Yandex that uses the Blink typography engine and runs on Windows, OS X, Android and iOS. A DLL hijacking vulnerability exists in the Yandex Browser installer for desktop versions prior to 17.4.1. The...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-11160

Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...

The vulnerability of the Adobe Photoshop graphic editor, which allows a hacker to escalate their privileges

The vulnerability of the Adobe Photoshop graphic editor arises from the fact that certain elements or search paths are not enclosed in quotes. Exploiting this vulnerability can allow a local attacker to increase their privileges...

The vulnerability of NVIDIA GPU graphics processor software allows attackers to enhance their privileges.

The vulnerability of NVIDIA GPU graphics processor software is related to the absence of quotation marks in the code for writing elements or search paths. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially crafted application...

McAfee ePO Deep Command Local Elevation of Privilege Vulnerability

McAfee ePO Deep Command is an extension of McAfee's primary endpoint security management product. A security vulnerability in Client Management and Gateway handling of windows search paths in McAfee ePO Deep Command allows local users to exploit the vulnerability to elevate privileges...

Fedora 19 : ruby-2.0.0.247-14.fc19 (2013-12663)

Update to Ruby 2.0.0-p247 rhbz979605. - Fix RubyGems search paths when building gems with native extension. - Make symlinks for psych gem to ruby stdlib dirs. - Add support for ABRT autoloading. - Better support for build without configuration rhbz977941. - Use system-wide cert.pem. - Fixes...

Ubuntu 11.10 / 12.04 LTS : emacs23 vulnerabilities (USN-1586-1)

Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. CVE-2012-0035 Paul Ling discovered that Emacs incorrectly handled...

USN-1586-1: Emacs vulnerabilities

Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. CVE-2012-0035 Paul Ling discovered that Emacs incorrectly handled...

CVE-2010-5226

Summary: CVE-2010-5226 affects Autodesk Design Review 2011 (version 11.0.0.86) and involves multiple untrusted search path vulnerabilities. The root cause is placing a Trojan horse through (1) dwmapi.dll, (2) whiptk_wt.7.12.601.dll, or (3) xaml_wt.7.6.0.dll in the current working directory, demon...

GVim may insecurely load dynamic libraries

Overview GVim may use unsafe methods for determining how to load DLLs. GVim is a text editor. GVim loads certain DLL's when TXT files are opened. GVim contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Makoto Shiotsuki reported this vulnerability t...

Multiple Yokka provided products may insecurely load executable files

Overview Multiple products provided by Yokka may use unsafe methods for determining how to load executables .exe. Multiple products provided by Yokka such as text editors, contain an issue with the file search path, which may insecurely load executables. Makoto Shiotsuki reported this vulnerabili...