7554 matches found
QNX RTOS 6.1 - 'PKG-Installer' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/4918/info It has been reported that the pkg-installer utility for QNX is vulnerable to a buffer overflow condition. The vulnerability is a result of an unbounded string copy of the argument to the "-U" commandline option of pkg-installer to a local...
QNX RTOS 6.1 - PKG-Installer Local Buffer Overflow
QNX RTOS 6.1 - PKG-Installer Local Buffer Overflow / source: https://www.securityfocus.com/bid/4918/info It has been reported that the pkg-installer utility for QNX is vulnerable to a buffer overflow condition. The vulnerability is a result of an unbounded string copy of the argument to the "-U"...
Gator installer Plugin allows any software to be installed
Advisory Title: Gator installer Plugin allows any software to be installed Release Date: 21/01/2002 Application: Gator installer plugin for Internet Explorer GAIN Platform: Windows clients with Internet Explorer. DLL version - 3.0.6.1 Severity: Malicious users can install backdoor software and ga...
remedy.txt
Security Holes in Remedy Client Installer Summary ------- Due to improper handling of temporary files, the installer program for Remedy Software's Action Request System client for unix can allow local users to gain root privileges. Details ------- The installer script for the unix AR clients...
TrendMicro InterScan VirusWall shared folder problem
I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...
Registry Permissions reminder - local privilege escalation on Windows NT
Howdy all, The generic security issue of lax permissions on registry keys under Windows NT 4 has been known for sometime see Stephen Sutton's Windows NT Security Guidelines http://www.trustedsystems.com/tssnsaguide.htm but here's a "new" curtly reminder of why it is so important to do so. Local...
Microsoft Windows NT 4.0 - MSIEXEC Registry Permissions
Microsoft Windows NT 4.0 - MSIEXEC Registry Permissions // source: https://www.securityfocus.com/bid/1835/info Due to weak permission settings for the registry key that handles the Microsoft Installer Service MSIEXEC, it is possible for a local user on Windows NT to escalate their privilege level...
Microsoft Windows NT 4.0 - MSIEXEC Registry Permissions
// source: https://www.securityfocus.com/bid/1835/info Due to weak permission settings for the registry key that handles the Microsoft Installer Service MSIEXEC, it is possible for a local user on Windows NT to escalate their privilege level. The file extension associated with the Microsoft...
CVE-2000-0724
CVE-2000-0724 involves the go-gnome Helix GNOME pre-installer. The vulnerability arises from a symlink attack in /tmp that lets local users overwrite arbitrary files, including uudecode, snarf, and some installer files. The described impact is complete confidentiality, integrity, and availability...
Дырка в Word и Excel
При открытии документа запускаются файлы riched20.dll и msi.dll из расоложения документа...
Multiple Local Vulnerabilities in Helix Gnome Installer
Multiple Vulnerabilities In Helix Gnome Installer 0.2 VULNERABILITIES: The Helix installer contains multiple locally exploitable vulnerabilities. 1. Several of the gdmify functions are vulnerable to attack because they use system and /tmp in unsafe manners SuSE and Caldera A mkdir of the right pa...
February 2, 2021, update for Office 2010 (KB4493180)
February 2, 2021, update for Office 2010 KB4493180 This article describes update 4493180 for Microsoft Office 2010 that was released on February 2, 2021.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2010. It doesn't apply...
backoffice.installer.txt
Date: Thu, 18 Feb 1999 14:44:48 -0800 PST From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-030: Microsoft BackOffice Vulnerability For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ |...
CVE-2024-31954
An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. An attacker must already have us...
Beta 6.2 Installer version of Security Update for Windows XP (KB905414)
Beta 6.2 Installer version of Security Update for Windows XP KB905414...
Beta 6.2 Installer version Security Update for Windows Server 2003 (KB899591)
Beta 6.2 Installer version Security Update for Windows Server 2003 KB899591...
Beta 6.2 Installer version of Security Update for Windows Server 2003 (KB905414)
Beta 6.2 Installer version of Security Update for Windows Server 2003 KB905414...
Microsoft Windows Installer 3.1
Microsoft Windows Installer 3.1...