Perfusion

Perfusion 在 Windows 7 、Windows Server 2008R2 、Windows 8 和 Windows Server 2012 上，RpcEptMapper 和 DnsCache（仅限7/2008R2）服务的注册表键配置了弱权限。任何本地用户都可以创建一个 Performance 子键，然后利用 Windows 性能计数器 以 NT AUTHORITY\SYSTEM 身份在 WMI 服务上下文中加载任意 DLL（这也是该工具名称的由来）。...

CVE-2025-71316: Improper Handling of Unicode Encoding

SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being...

CVE-2020-24972: Improper Encoding or Escaping of Output

The Kleopatra component before 3.1.12 and before 20.07.80 for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL...

CVE-2019-17099: Untrusted Search Path

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163...

CVE-2019-15295: Untrusted Search Path

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path...

Mozilla Firefox 12.x < 12 Multiple Vulnerabilities

Binary data 801297.prm...

CVE-2009-3792: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Adobe Flash Media Server FMS before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors...