Microsoft Windows Multiple Vulnerabilities (KB4088875)

This host is missing a critical security update according to Microsoft KB4088875 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4088782)

This host is missing a critical security update according to Microsoft KB4088782 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the security update for the Windows Installer elevation of privilege Vulnerability in Windows Server 2008 and WES09 and POSReady 2009: March 13, 2018

Description of the security update for the Windows Installer elevation of privilege Vulnerability in Windows Server 2008 and WES09 and POSReady 2009: March 13, 2018 Summary An elevation of privilege vulnerability exists in Windows Installer when the Installer fails to properly sanitize input,...

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

KLA11778 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. An information...

JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Installer. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

Code injection

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Installer. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

Oracle Java ME SDK Windows Installer Elevation of Privilege Vulnerability

Oracle Java Micro Edition is a small version of Oracle's Java platform for developing and deploying Java applications.Java ME SDK is one of the development toolkits. A security vulnerability exists in the Installer subcomponent of the Java ME SDK component in Oracle Java Micro Edition, version 8....

PT-2018-15674 · Oracle +1 · Java Se +2

Name of the Vulnerable Software and Affected Versions: Java SE versions 8u152 and 9.0.1 Description: The issue is a difficult to exploit vulnerability in the Java SE component, specifically in the Installer subcomponent. It allows a low privileged attacker with logon to the infrastructure where...

CVE-2016-6804

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

Design/Logic Flaw

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

Error "There is a problem with this Windows Installer package........ Contact your support personnel or package vendor" when Installing Windows Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Installation of Receiver fails with the following error, "There is a problem with this Windows...

CVE-2017-11158

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

CVE-2017-11157

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in t...

Installer of "Flets Azukeru for Windows Auto Backup Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Azukeru for Windows Auto Backup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability...

Installer of Qua station connection tool for Windows may insecurely load Dynamic Link Libraries

Overview Qua station provided KDDI CORPORATION is a 4G LTE photostrage. Qua station connection tool is used to view data saved on Qua station from a PC and/or save data on a PC. Installer of Qua station connection tool for Windows contains an issue with the DLL search path, which may lead to...

UBUNTU-CVE-2017-11421

gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename...

Apple QuickTime for Windows Installer Untrustworthy Search Path Vulnerability

Apple QuickTime for Windows is a multimedia playback software for Windows developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. An untrusted search path vulnerability exists in the installer in QuickTime for Windows. An...

CVE-2017-2218

Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Sharp RW-5100 driver installer for Windows untrustworthy search path vulnerability (CNVD-2017-11055)

Sharp RW-5100 driver installer for Windows is a Windows-based driver installer for IC card readers from Sharp Japan. An untrustworthy search path vulnerability exists in the Sharp RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0...