XnView suffers from dll hijacking vulnerability

XnView is an image viewing software. XnView suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

cad quick draw suffers from dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad quick draw. An attacker can use this vulnerability to load malicious dll and execute...

cad mini viewer suffers from dll hijacking vulnerability (CNVD-2019-33721)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini viewer CNVD-C-2019-128672. An attacker can exploit the vulnerability to load a...

cad intelligent weak power has dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad intelligent weak power. Attackers can use this vulnerability to load malicious dll and...

Check Point Endpoint Security Initial Client for Windows Elevation of Privilege Vulnerability

Check Point Endpoint Security Initial Client for Windows is a Windows-based client application for Check Point Endpoint Security endpoint security management software from Check Point Israel. An elevation of privilege vulnerability exists in versions of Check Point Endpoint Security Initial Clien...

CVE-2019-7362

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution...

CVE-2019-7364

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user...

CVE-2019-14686

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products v15 Folder Shield component and the standalone Trend Micro Ransom Buster 1.0 tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges...

Adobe After Effects CC 2019 Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe After Effects CC 2019 is a graphic video processing software from Adobe for organizations engaged in design and video stunts. An insecure library loading DLL hijacking vulnerability exists in Adobe After Effects CC 2019 16 and earlier versions. An attacker can exploit this vulnerability to...

Adobe Prelude CC 2019 Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe Prelude CC 2019 is a video recording and capture tool designed for intuitive and efficient media organizing and metadata entry, quickly tagging and transcoding video footage and creating rough cuts on the fly. An insecure library loading DLL hijacking vulnerability exists in Adobe Prelude C...

CVE-2019-1178

An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

CVE-2019-1179

An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

CVE-2019-7870

Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to arbitrary code execution...

PT-2019-3042 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the way the psmsrv.dll handles objects in memory, allowing an attacker to execute code with elevated permissions. A locally authenticated attacker could exploit this...

Lenovo Yoga 700-11ISK and Yoga 700-14ISK DLL Search Path Vulnerability

The Lenovo Yoga 700-11ISK and Yoga 700-14ISK are both laptops from the Chinese company Lenovo Lenovo. The Lenovo Yoga 700-11ISK and Yoga 700-14ISK suffer from a DLL search path vulnerability that can be exploited by an attacker to elevate privileges...

Schneider ZigBee Installation Toolkit Has Multiple dll Hijacking Vulnerabilities

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. The Schneider ZigBee Installation Toolkit has multiple dll hijacking vulnerabilities that can be exploited by an attacker to gain server privileges...

Cisco Jabber for Windows DLL Preloading Vulnerability (cisco-sa-20190703-jabber-dll)

According to its self-reported version, Cisco Jabber for Windows is affected by a vulnerability in the loading mechanism of specific dynamic link libraries due to insufficient validation of the resources loaded by the application at run time. An authenticated, local attacker can exploit this to...

CVE-2019-1855 Cisco Jabber for Windows DLL Preloading Vulnerability

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...

Cisco Jabber for Windows DLL Preloading Vulnerability

Cisco Jabber for Windows securely unifies status, instant messaging, video, voice, voice messaging, screen sharing, and conferencing capabilities into a single client that simplifies communications and increases productivity. A DLL preloading vulnerability exists in Cisco Jabber for Windows...