EUVD-2018-1411

Malware in sbrugna...

axpdfium untrustworthy search path vulnerability

axpdfium is a PDFium library based on the PDF document viewer plug-ins. An untrustworthy search path vulnerability exists in axpdfium. An attacker can exploit this vulnerability with a malicious DLL in the directory to execute arbitrary code with the privileges of the user running the program...

CVE-2018-0601

Untrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0601

Untrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0601

The CVE-2018-0601 entry concerns the axpdfium v0.01 Susie plug‑in, which contains an untrusted/search path vulnerability (CWE-427). An attacker could place a malicious DLL in a directory used by the plug‑in, causing arbitrary code execution with the privileges of the user running the program. Thi...

CVE-2018-0601

Untrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries

Overview Susie plug-in "axpdfium" contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user running the program where "axpdfium" is used. Solution Update the plug-in Update...

JVN#79301396: Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries

Susie plug-in "axpdfium" contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user running the program where "axpdfium" is used. Solution Update the plug-in Update the plug-...