January 2, 2019, update for Office 2016 (KB4461435)

None None...

Installer of Mapping Tool may insecurely load Dynamic Link Libraries

Overview Installer of Mapping Tool provided by Japan Atomic Energy Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Takashi Sugawara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...

JVN#33677949: Installer of Mapping Tool may insecurely load Dynamic Link Libraries

Installer of Mapping Tool provided by Japan Atomic Energy Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read Exploit

Exploit for windows platform in category local exploits The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while...

Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read

Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done...

Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Read

The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while impersonating, but using junctions there is still a TOCT...

Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Copy/Read

The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while impersonating, but using junctions there is still a TOCT...

Intel VTune Amplifier Elevation of Privilege Vulnerability

Intel VTune Amplifier is a set of performance analysis tools from Intel USA. The product is mainly used for performance analysis of software for high-performance computing, IoT embedded applications, device drivers and game engines. An elevation of privilege vulnerability exists in the installer ...

Windows Persistent Service Installer Exploit

This Module will generate and upload an executable to a remote host and then makes it a persistent service. It will create a new service which will start the payload whenever the service is running. Admin or system privilege is required. This module requires Metasploit:...

Intel System Defense Utility Elevation of Privilege Vulnerability

Intel System Defense Utility is a tool from Intel Corporation USA for remotely configuring the security of PCs supporting Intel vPro technology. The product is mainly used for security configuration of Intel vPro features and SMB environments. An elevation of privilege vulnerability exists in the...

Intel Parallel Studio Elevation of Privilege Vulnerability

Intel Parallel Studio is a development kit for high-performance applications from Intel Corporation. An elevation of privilege vulnerability exists in the installer in versions prior to Intel Parallel Studio 2019 Gold, which can be exploited by a local attacker to elevate privileges...

CVE-2018-18093

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access...

CVE-2018-3704

Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access...

CVE-2018-3704

Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access...

Input validation

Improper directory permissions in the installer for the IntelR System Defense Utility all versions may allow authenticated users to potentially enable a denial of service via local access...

CVE-2018-3704

CVE-2018-3704: Intel Parallel Studio XE for Windows* has an elevation of privilege via the installer due to improper directory permissions. The issue affects Intel Parallel Studio XE for Windows* before 2019 Gold, enabling an authenticated local attacker to potentially escalate privileges. Intel’...

CVE-2018-3705

CVE-2018-3705 affects Intel® System Defense Utility (all versions). The vulnerability arises from improper directory permissions in the installer, which could allow an authenticated local attacker to cause a denial of service. Intel’s advisory INTEL-SA-00209 states there are no mitigations/update...

CVE-2018-18093

Intel VTune Amplifier 2018 for Windows (Update 3 and earlier) contains an elevation of privilege vulnerability due to improper installer file permissions, allowing a local unprivileged user to potentially gain privileged access. Intel’s advisory INTEL-SA-00194 confirms the issue and advises updat...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Flash Player installer. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review Adobe Security Bulletin APSB18-...

Design/Logic Flaw

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...