119 matches found
How to configure Google Drive access from Receiver for Chrome
By enabling access to Google Drive from Receiver for Chrome, your users can seamlessly use existing Windows-based applications for example, Microsoft Word on a Chromebook and access the files residing on Google Drive.For example, if a user saves a file to Google Drive for instance, a .DOC file...
DllHijackAuditor 3.5 - Stack Overflow Vulnerability
DLL Hijack Auditor is the smart tool to Audit against the Dll Hijacking Vulnerability in any Windows application. This is one of the critical security issue affecting almost all Windows systems. Though most of the apps have been fixed, but still many Windows applications are susceptible to this...
Takumi Yamada DX Library Remote Code Execution Vulnerability
Takumi Yamada DX Library is an open source library for creating Windows applications. A remote code execution vulnerability exists in Takumi Yamada DX Library's handling of special strings, which could be exploited by a remote attacker to submit a special request to execute arbitrary code...
DX Library vulnerable to remote code execution
Overview DX Library is an open source library for creating Windows applications. DX Library contains a remote code execution vulnerability due to an issue in printfDx. Tomoya Kitagawa of Graduate School of Information Science, Nara Institute of Science and Technology reported this vulnerability t...
JVN#15205734: DX Library vulnerable to remote code execution
DX Library is an open source library for creating Windows applications. DX Library contains a remote code execution vulnerability due to an issue in printfDx. Impact When processing a specially crafted string, an application built using DX Library may allow arbitrary code to be executed. Solution...
Corel Software DLL Hijacking Vulnerability Allows Hackers to Execute Malicious Code
Security researchers have disclosed local zero day DLL hijacking vulnerabilities in several applications developed by Corel Software that could allow an attacker to execute arbitrary commands on victims' computer, potentially affecting more than 100 million users. The security holes were publicly...
SkinCrafter3_vs2008 ActiveX Exploit
The vulnerability lies in the COM component used by the product SkinCrafter3vs2008.dll Description: Skin Crafter is a software that is used to create custom skins for different windows applications. SkinCrafter is compatible with Windows XP / Vista / 7 / 8 and earlier versions. ActiveX Buffer...
8Pixel Blog CMS v4.2 - Cross Site Scripting Vulnerability
Document Title: =============== 8Pixel Blog CMS v4.2 - Cross Site Scripting Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 1 Product & Service Introduction: =============================== 8pixel.net developes...
Insecure Loading of Dynamic Link Libraries in Windows Applications
US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries DLLs. When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. ...
DLL Hijacking Exploit Code Posted for PowerPoint, Other Apps
A day after Microsoft released information on the remotely exploitable DLL-hijacking vulnerability that affects dozens of Windows applications, researchers are starting to discover exactly which pieces of software are vulnerable. The list so far includes PowerPoint, Wireshark and some application...
Microsoft Visual Basic 6.0 VBP Project File Handling Buffer Overflow (CVE-2007-4776)
Microsoft Visual Basic is a tool for productively building type-safe and object-oriented applications. It allows developers to create a wide range of Windows, Web, mobile and Office applications. Visual Basic VB is an event driven programming language and associated development environment from...
VMSA-2009-0013:VMware Fusion resolves two security issues
VMSA-2009-0013 VMware Fusion resolves two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0013 VMware Security Advisory Synopsis: VMware Fusion resolves two security issues VMware Security Advisory Issue date: 2009-10-01 VMware Security Advisory Updated on...
Update Protection against Novell Client NetIdentity Agent Remote Code Execution
A remote code execution vulnerability exists in Novell Client NetIdentity Agent. The Novell NetIdentity agent works with eDirectory authentication to provide background authentication to Windows Web-based applications that require eDirectory authentication. The flaw is due to insufficient sanity...
Microsoft Speech API memory corruption
Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...
Few unreported vulnerabilities by SehaTo
Hello lists, SehaTo sehato at yandex ru reported few vulnerabilities in different Windows applications. Original messages in Russian may be found at http://securityvulns.com/source16446.html 1. Microsoft Windows Explorer corrupted WMF vulnerability...
SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000).
Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...
Microsoft WMF memory corruption vulnerability
Overview Microsoft applications fail to properly handle Windows Metafile WMF images potentially allowing a remote attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Windows Graphics Rendering Engine supports a number of image formats including WMF images. Windows...
Microsoft Windows - 'April Fools 2001' Set Incorrect Date
/ source: https://www.securityfocus.com/bid/180/info Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the MSVCRT.DLL not correctly interpreting Daylight Savings ti...
