1714 matches found
CVE-2016-7300
Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain privileges via a Trojan horse executable file, aka "Microsoft MAU Office Elevation of Privilege Vulnerability."...
CVE-2016-7300
CVE-2016-7300 affects Microsoft Auto Update (MAU) for Mac. The root cause is an untrusted search path and improper update validation that lets a local attacker place a crafted executable to execute code with elevated privileges. Impact is local privilege escalation; public exploits exist and were...
Microsoft Auto Updater for Mac CVE-2016-7300 Local Privilege Escalation Vulnerability
Description Microsoft Auto Updater for Mac is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Auto Updater for Mac Recommendations Permit local access for trusted...
MGASA-2016-0409 Updated thunderbird packages fix security vulnerabilities
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash CVE-2016-5296. The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This...
Updated thunderbird packages fix security vulnerabilities
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash CVE-2016-5296. The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This...
Mozilla Firefox ESR < 45.5 Multiple Vulnerabilities
Binary data 9805.prm...
Security vulnerabilities fixed in Thunderbird 45.5 — Mozilla
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability require...
Mozilla Firefox Arbitrary File Write Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from an arbitrary file write vulnerability. When the Mozilla Updater program runs, log files in the Updater working directory point to hard links, allowing an attacker t...
Intel SSD Toolbox Privilege Acquisition Vulnerability
Intel SSD Toolbox is a set of solid state drive inspection tools from Intel USA. A privilege acquisition vulnerability exists in the updater subsystem in Intel SSD Toolbox versions prior to 3.3.7, which can be exploited by a local attacker to gain privileges...
CVE-2016-8101
The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors...
CVE-2016-8101
The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors...
Design/Logic Flaw
The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors...
CVE-2016-8101
The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors...
CVE-2016-8101
The CVE-2016-8101 issue affects Intel SSD Toolbox updater subsystem and is present in versions prior to 3.3.7. A local attacker can gain privileges via unspecified vectors; the exact exploit path is not detailed in the provided documents. The trusted remediation is to upgrade to version 3.3.7 or ...
Vulnerability in Intel SSD Toolbox allows authenticated users to elevate privileges via updater subsystem
Summary: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege level in the Operating System. Description: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege in the Operating Syste...
The vulnerability of the Firefox browser, which allows a hacker to modify arbitrary files
The vulnerability of the Firefox browser’s Updater component is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify arbitrary files by manipulating application path parameters and hard links...
Mozilla Firefox Updater Local File Write Vulnerability
Mozilla Firefox is an open source web browser; A security vulnerability in Mozilla Firefox's Updater allows local attackers to exploit the vulnerability to write arbitrary files...
CVE-2016-5253
The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...
