SciTools Understand 2.6 DLL Loading Code Execution

/ SciTools Understand 2.6 wintab32.dll DLL Loading Arbitrary Code Execution Vendor: Scientific Toolworks, Inc. Product web page: http://www.scitools.com Affected version: 2.6 build 598 Summary: Understand is a static analysis tool for maintaining, measuring, and analyzing critical or large code...

Interactive Graphical SCADA System DLL Loading Arbitrary Code Execution Vulnerability

This host is installed with Interactive Graphical SCADA System and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbigssdllcodeexecutionvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ Interactive Graphical SCADA System DLL Loading Arbitrary Code Execution Vulnerability...

Interactive Graphical SCADA System DLL Loading Arbitrary Code Execution Vulnerability

Interactive Graphical SCADA System is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office multiple security vulnerabilities

Privilege escalation, use-after-free, insecure DLL loading, memory corruption...

Microsoft Internet Explorer Multiple Vulnerabilities (2618444)

This host is missing an important security update according to Microsoft Bulletin MS11-099. OpenVAS Vulnerability Test $Id: secpodms11-099.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2618444 Authors: Rachana Shetty Copyright: Copyright c 2011...

Microsoft Internet Explorer CVE-2011-2019 DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic...

Microsoft PowerPoint CVE-2011-3396 DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft PowerPoint is prone to vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location which contains a specially crafted Dynamic Link...

Authentication flaw

CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control...

CVE-2011-4051

CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control...

PHP Foreign Function Interface Arbitrary DLL Loading safe_mode Restriction Bypass

According to its banner, the version of PHP installed on the remote host is affected by a security bypass vulnerability. The Foreign Function Interface ffi extension does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary D...

Microsoft Windows Mail Insecure Library Loading Code Execution (MS11-085; CVE-2011-2016)

A remote code execution vulnerability has been reported in Microsoft Windows Mail and Windows Meeting Space. The vulnerability is due to an error in the way the application improperly restricts the path loading of dynamic link library DLL files. A remote attacker may exploit this vulnerability by...

Microsoft Windows multiple security vulnerabilities

Active Accessibility and Media Center insecure DLL loading...

Microsoft Active Accessibility DLL Loading Remote Code Execution (MS11-075; CVE-2011-1247)

A remote code execution vulnerability has been reported in Microsoft Windows Active Accessibility component. The vulnerability is due to an error in the way certain applications using OleAut32.dll handle the loading of DLL files. A remote attacker may exploit this vulnerability by enticing a user...

PT-2011-3547 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows 7 Gold and SP1 Windows Media Center TV Pack for Windows Vista Description: A remote code execution issue exists in the way Windows Media Center handles the loading of DLL files, allowing an attack...

Microsoft Office multiple security vulnerabilities

Multiple Excel memory corruptions, Word uninitialized pointer dereference, unsafe DLL loading...

PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

Multiple Products .DLL Insecure Library Loading (CVE-2011-0029; CVE-2011-1980)

A remote code execution vulnerability exists in the way that certain products handle the loading of DLL files. Certain applications improperly restrict the path used for loading external libraries. A remote attacker could exploit this vulnerability by manipulating a user to open a legitimate file...

Microsoft Windows Multiple Components Insecure Library Loading (MS11-071; CVE-2011-1991)

A remote code execution vulnerability has been reported in the way that certain Windows components handle the loading of DLL files. A remote attacker could exploit this vulnerability to execute arbitrary code in an affected system...

Microsoft Windows Data Access Component DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Data Access Component. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya Aura Conferenci...

xAurora 10.00 - RSRC32.dll DLL Loading Arbitrary Code Execution

xAurora 10.00 - RSRC32.dll DLL Loading Arbitrary Code Execution / source: https://www.securityfocus.com/bid/48432/info xAurora is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application...