CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the...

CVE-2017-12480

The CVE-2017-12480 entry concerns Sandboxie installer version 5071703 with a DLL hijacking/unsafe DLL loading vulnerability. An attacker could place a malicious dwmapi.dll or profapi.dll in an AppData\Local\Temp directory, leading to code execution when the installer loads the DLL. The issue is d...

Format string

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

CVE-2017-12414

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

CVE-2017-12414

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

CVE-2017-12414

Format Factory 4.1.0 is affected by a DLL hijacking vulnerability caused by untrusted search paths for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll. The Red Hat/CVEs and CNVD entries describe this as allowing a remote attacker to execute code by exploiting the hijack when the vulnerable softwar...

VIT Spider Player Untrusted Search Path Vulnerability

VIT Spider Player is an audio player that supports audio files in MP3, AAC, WMA, OGG and FLAC formats. A security vulnerability exists in VIT Spider Player version 2.5.3. The vulnerability can be exploited by attackers to hijack DLLs with the help of malicious dwmapi.dll, olepro32.dll, dsound.dll...

Design/Logic Flaw

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

CVE-2017-11749

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

CVE-2017-11749

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

CVE-2017-11748

CVE-2017-11748 affects VIT Spider Player 2.5.3 and is caused by an untrusted search path that enables DLL hijacking through Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll. The vulnerability could allow loading of malicious DLLs, potentially impacting the running process. The c...

CVE-2017-11748

VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file...

CVE-2017-11749

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...

Notepad++ 6.9.2 DLL Hijacking

Aloha, npp.6.9.2.Installer.exe loads and executes dwmapi.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If a...

Process Hacker DLL Hijacking

Hi Wen Jia, You probably heart about the Java issue which affected their installer. http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html However this issue also affects multiple other installers as a security researcher has shown...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...