1015 matches found
Adobe Animator suffers from dll hijacking vulnerability
Adobe Animator is a 2D vector animation creation software. Adobe Animator has a dll hijacking vulnerability when processing xfl project files, which can be exploited by attackers to load a malicious dll and execute malicious code...
Adobe After Effects has a dll hijacking vulnerability
Adobe After Effects abbreviation "AE" is a graphic video processing software launched by Adobe. Adobe After Effects has a dll hijacking vulnerability when processing aep project files, which can be exploited by attackers to load a malicious dll and execute malicious code...
The vulnerability of the synchronization identifier application in the Cisco Directory Connector lies in errors in the path validation mechanism, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the application for synchronizing identifiers in the Cisco Directory Connector is related to errors in the mechanism for checking the path of dynamically attached libraries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
CVE-2018-16156
In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...
xp-builder suffers from dll hijacking vulnerability
xp-builder is an XGT HMI editing software. xp-builder suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...
XG5000 suffers from dll hijacking vulnerability
XG5000 is a software for programming and debugging XGT/XGB series PLCs. XG5000 suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...
DLL Hijacking Vulnerability in Display Control Remote HMI
Shenzhen Xianzhong Technology is a national high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. There is a dll hijacking vulnerability in Remote HMI. Attackers can construct a malicious application placed in a specific...
Tencent TIM pc client software suffers from a command execution vulnerability
TIM, QQ Office Simple Edition, is a cross-platform communication tool that focuses on teamwork. Tencent TIM pc client software has a command execution vulnerability, the software PC client can allow an attacker to inject executable DLL files into the client process to execute arbitrary functions...
Kingsoft pdf pc client software has a command execution vulnerability
Kingsoft PDF is by Kingsoft Office Software Limited out of a PDF file format for reading and processing tools. Kingsoft pdf pc client software there are command execution vulnerabilities, the software PC client can allow an attacker to inject executable DLL files in the client process, the...
Hopscotch MagicWorks HMI wintab32 suffers from dll hijacking vulnerability
Shenzhen Hexin Automation Technology Co., Ltd. is a company that mainly deals with items such as PLC, HMI, servo, special control system, remote I/O and field network products. Hopsin MagicWorks HMI wintab32 has a dll hijacking vulnerability that can be exploited by attackers to execute malicious...
dll hijacking vulnerability exists in state god dwmapi
Nanjing New Dixon Software Technology Co., Ltd. is a company mainly engaged in computer software and hardware technology development, sales, installation, technical consulting, technical services; computer system integration; network engineering and other projects. There is a dll hijacking...
The vulnerability of the McAfee Total Protection antivirus protection, related to errors in checking the loading path of dynamic libraries, allows a hacker to execute arbitrary code.
The vulnerability of the McAfee Total Protection antivirus protection lies in errors during the checking of the path where dynamic libraries are loaded. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2019-5913
Untrusted search path vulnerability in the installer of LHMelting LHMelting for Win32 Ver 1.65.3.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2019-3587
DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...
The vulnerability of the NormaCS automation tool for working with regulatory documents allows a violator to execute any code they desire.
The vulnerability of the NormaCS tool for automating the processing of regulatory documents is related to the use of the MFC library set. It arises due to deficiencies in the restriction on the searchable range of dynamically loaded libraries. Exploiting this vulnerability could allow a malicious...
Sublime Text 3 v3.1.1 build 3176 suffers from DLL hijacking vulnerability
Sublime Text is a cross-platform, extensible text editor for code, markup, and more. A DLL hijacking vulnerability exists in Sublime Text 3 v3.1.1 build 3176. An attacker can exploit this vulnerability to elevate privileges...
CVE-2018-20211
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws3232.dll file into this new folder, aka DLL Hijacking. NOTE: 8.32 is an obsolete version from 2010 9.x was released starti...
CVE-2018-5202
SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code...
The installer of Windows10 Fall Creators Update Modify module for Security Measures tool may insecurely load Dynamic Link Libraries
Overview The installer of Windows10 Fall Creators Update Modify module for Security Measures tool provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Tomohisa Hasegawa of Canon...