Sony Media Go Untrustworthy Search Path Vulnerability

Sony Media Go is a multimedia application from Sony Japan. The program supports audio and video playback, picture viewing and games. An untrustworthy search path vulnerability exists in Sony Media Go 3.2.0.191 and earlier versions. An attacker can exploit this vulnerability to gain privileges wit...

CVE-2017-10891

Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-8137

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

Design/Logic Flaw

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

CVE-2017-8137

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...

Cisco FindIT Network Discovery Utility Local Arbitrary Code Execution Vulnerability

Cisco FindIT Network Discovery Utility is a network device manager from Cisco USA. The product provides management functions for Cisco network devices. A local arbitrary code execution vulnerability exists in Cisco FindIT Network Discovery Utility that originates when the program loads a maliciou...

JVN#08517069: The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the...

Cisco Immunet antimalware installer untrustworthy search path vulnerability

Cisco Immunet antimalware is a set of malware protection programs from Cisco USA. installer is one of the installers. An untrusted search path vulnerability exists in the installer of Cisco Immunet antimalware, which results from insufficient input detection of paths and filenames before loading ...

CVE-2016-6804

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-10885

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

AutomationDirect Multiple Product DLL Hijacking Vulnerability

AutomationDirect is one of the larger PLC design and manufacturing companies in the world, with CLICK, C-More, and C-More Micro as part of the programming software, GS Drives as a configuration software, and SL-Soft SOLO as a temperature controller configuration software. Multiple product DLL...

HYPER SBI Untrustworthy Search Path Vulnerability

SBI SECURITIES HYPER SBI is an online trading tool for stock securities provided by SBI SECURITIES in Japan. An untrustworthy search path vulnerability exists in SBI SECURITIES HYPER SBI 2.2 and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a...

Installer of HYPER SBI may insecurely load Dynamic Link Libraries

Overview HYPER SBI provided by SBI SECURITIES Co.,Ltd. is a trading tool. Installer of HYPER SBI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuto Iso of NTT Security Japan KK reported this vulnerability to IPA. JPCERT/CC...

FFlets Easy Setup Tool Installer Untrusted Search Path Vulnerability

Flets Easy Setup Tool is a Flets easy setup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan.Installer is one of the installation programs. An untrusted search path vulnerability exists in the Installer in Flets Easy Setup Tool 1.2.0 and earlier versions. An attacker can exploit this...

Trihedral Engineering Limited VTScada DLL Hijacking Vulnerability

VTScada is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. Trihedral Engineering Limited VTScada suffers from a DLL hijacking vulnerability that could allow an attacker to cause the program to execute a specially crafted malicious dll fi...

Bomgar Remote Support DLL Hijacking Vulnerability

Bomgar Remote Support is a suite of cross-platform remote support software from Bomgar USA. The software provides remote assistance through firewalls for remote desktops, servers, POS systems and other mobile devices. A security vulnerability exists in the agent in Bomgar Remote Support, which...

Multiple Sony products untrustworthy search path vulnerability

Sony NFC Port Software and others are products of Sony Japan.Sony NFC Port Software is a set of NFC interface software.PC/SC Activator for Type B is a Type B interface support software. An untrusted search path vulnerability exists in multiple Sony products. A remote attacker can exploit this...

IrfanView buffer overflow vulnerability (CNVD-2017-32313)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. The vulnerability can be exploited by...

IrfanView buffer overflow vulnerability (CNVD-2017-32308)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer in Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. The vulnerability can be exploited by a...