Design/Logic Flaw

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5232

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5234

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5235

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5234

CVE-2017-5234 affects Rapid7 Insight Collector installers prior to version 1.0.16, which ship with a DLL preloading vulnerability . An attacker could trick a user into placing a malicious DLL in the installer’s current working directory, enabling the DLL to be loaded during installation. Rapid7 n...

CVE-2017-5235

Rapid7 Metasploit Pro installers prior to 4.13.0-2017022101 are affected by a DLL preloading vulnerability: the installer can load a malicious DLL from the current working directory. The issue is tied to how the installer searches for system DLLs, allowing an attacker with a malicious DLL in the ...

CVE-2017-5233

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5233: Untrusted Search Path

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5234: Untrusted Search Path

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5235: Untrusted Search Path

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5232: Untrusted Search Path

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

PT-2017-16409

Name of the Vulnerable Software and Affected Versions Rapid7 Insight Collector versions prior to 1.0.16 Description The issue concerns a DLL preloading vulnerability. This means it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

PT-2017-16407

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose versions prior to 6.4.24 Description The issue concerns a DLL preloading vulnerability. This means that the installer can potentially load a malicious DLL if it is located in the current working directory of the installer...

PT-2017-16410

Name of the Vulnerable Software and Affected Versions Rapid7 Metasploit Pro versions prior to 4.13.0-2017022101 Description The issue concerns a DLL preloading vulnerability. This means it is possible for the installer to load a malicious DLL located in the current working directory of the...

PT-2017-16408

Name of the Vulnerable Software and Affected Versions Rapid7 AppSpider Pro versions prior to 6.14.053 Description The issue concerns a DLL preloading vulnerability. This means that the installer can potentially load a malicious DLL if it is located in the current working directory of the installe...

Snagit DLL Preloading Arbitrary Code Execution

The version of Snagit installed on the remote Windows host has a DLL preloading vulnerability. An attacker can execute arbitrary code by tricking a user into opening a Snagit file .snag, .snagprof, or .snagcc from an attacker-controlled location such as a network share. C Tenable Network Security...

Microsoft Expression Design wintab32.dll Library Loading

Added: 04/25/2012 CVE: CVE-2012-0016 BID: 52375 OSVDB: 80001 Background Microsoft Expression Design is a commercial professional illustration vector and raster graphic design tool for web images. Problem Microsoft Expression Design contains a flaw in the way it loads dynamic-link libraries DLL. T...

Microsoft Fills Windows, Office Holes with March Patch Release

Microsoft Corp. issued their monthly security bulletins on Tuesday, with fixes for four known vulnerabilities in the company’s Windows operating system, Office suite and Remote Desktop Connection products. The March patch release included three bulletins: MS11-015, 016 and 017. Only one, MS11-015...

Microsoft security update stamps out 11 product vulnerabilities

Microsoft security update stamps out 11 product vulnerabilities American software heavyweight Microsoft Corp. has this week rolled out three security bulletins for Windows, addressing a total of 11 vulnerabilities targeting potential exploits in platforms ranging from Microsoft Office to Forefron...

MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)

The remote Windows host is running a version of Microsoft Office that is affected by several vulnerabilities : - An integer underflow exists in the way the application parses the PowerPoint file format, which could lead to heap corruption and allow for arbitrary code execution when opening a...