CVE-2021-36216

The CVE-2021-36216 entry applies to LINE for Windows, affected in version 6.2.1.2289 and earlier. The root cause is a DLL injection flaw that permits arbitrary code execution. The vulnerability is described as local (attack vector LOCAL) with low attack complexity, and could lead to partial confi...

CVE-2021-36216: Uncontrolled Search Path Element

LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...

PT-2021-21181

Name of the Vulnerable Software and Affected Versions LINE for Windows versions 6.2.1.2289 and before Description The issue allows for arbitrary code execution via malicious DLL injection. Recommendations For versions 6.2.1.2289 and before, update to a version later than 6.2.1.2289 to resolve the...

This New Malware Family Using CLFS Log Files to Avoid Detection

Cybersecurity researchers have disclosed details about a new malware family that relies on the Common Log File System CLFS to hide a second-stage payload in registry transaction files in an attempt to evade detection mechanisms. FireEye's Mandiant Advanced Practices team, which made the discovery...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

CVE-2021-20793

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

PT-2021-14248

Name of the Vulnerable Software and Affected Versions: Sony Audio USB Driver versions 1.10 and prior HAP Music Transfer versions 1.3.0 and prior Description: The issue allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory. This is due ...

CVE-2021-20793: Uncontrolled Search Path Element

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

OSV-2021-1160 Heap-buffer-overflow in pe_valid_dll_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37443 Crash type: Heap-buffer-overflow READ 1 Crash state: pevaliddllname peparsedelayimportdllname peparsedelayedimports...

PT-2021-27718

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the pe valid dll name, pe parse delay import dll name, and pe parse delayed...

CVE-2021-38469

Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL...

Siemens JT2Go < 13.2.0.2 Multiple Vulnerabilities (SSA-938030)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.2. It is, therefore, affected by multiple vulnerabilities, including the following: - An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Open Design Alliance...

CVE-2021-3633

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation...

Privilege escalation

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation...

CVE-2021-3633

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation...

CVE-2021-3633

CVE-2021-3633 affects Lenovo Driver Management. A DLL preloading vulnerability in Lenovo Driver Management prior to version 2.9.0719.1104 could allow privilege escalation. Affected component: Lenovo Driver Management (Windows). Root cause: DLL preloading. Impact: privilege escalation if exploited...

PT-2021-21232

Name of the Vulnerable Software and Affected Versions Lenovo Driver Management versions prior to 2.9.0719.1104 Description A DLL preloading issue allows privilege escalation. Recommendations For versions prior to 2.9.0719.1104, update to version 2.9.0719.1104 or later to resolve the issue...

Lenovo Driver Management 代码问题漏洞

Lenovo Driver Managemen is a Lenovo power management driver for Windows 10, 8.1, 8, 7 32-bit, 64-bit from Lenovo China. A security vulnerability exists in Lenovo Driver Management, which stems from a DLL preloading vulnerability in Lenovo Driver Management prior to version 2.9.0719.1104 that allo...

CVE-2021-3633: Improper Verification of Cryptographic Signature

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation...

COMMAX WebViewer ActiveX Control 2.1.4.5 Buffer Overflow

COMMAX WebViewer ActiveX Control 2.1.4.5 CommaxWebViewer.ocx Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: 2.1.4.5 Summary: COMMAX activex web viewer client 32bit for COMMAX DVR/NVR. Desc: The vulnerability is caused due to a boundary error in...