7686 matches found
Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Copy/Read
The bug is in “MsiAdvertiseProduct” Calling this function will result in a file copy by the installer service. This will copy an arbitrary file that we can control with the first parameter into c:\windows\installer … a check gets done while impersonating, but using junctions there is still a TOCT...
Intel VTune Amplifier Elevation of Privilege Vulnerability
Intel VTune Amplifier is a set of performance analysis tools from Intel USA. The product is mainly used for performance analysis of software for high-performance computing, IoT embedded applications, device drivers and game engines. An elevation of privilege vulnerability exists in the installer ...
Windows Persistent Service Installer Exploit
This Module will generate and upload an executable to a remote host and then makes it a persistent service. It will create a new service which will start the payload whenever the service is running. Admin or system privilege is required. This module requires Metasploit:...
Intel System Defense Utility Elevation of Privilege Vulnerability
Intel System Defense Utility is a tool from Intel Corporation USA for remotely configuring the security of PCs supporting Intel vPro technology. The product is mainly used for security configuration of Intel vPro features and SMB environments. An elevation of privilege vulnerability exists in the...
Intel Parallel Studio Elevation of Privilege Vulnerability
Intel Parallel Studio is a development kit for high-performance applications from Intel Corporation. An elevation of privilege vulnerability exists in the installer in versions prior to Intel Parallel Studio 2019 Gold, which can be exploited by a local attacker to elevate privileges...
CVE-2018-18093
Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access...
CVE-2018-3704
Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access...
CVE-2018-3704
Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access...
Input validation
Improper directory permissions in the installer for the IntelR System Defense Utility all versions may allow authenticated users to potentially enable a denial of service via local access...
CVE-2018-3704
CVE-2018-3704: Intel Parallel Studio XE for Windows* has an elevation of privilege via the installer due to improper directory permissions. The issue affects Intel Parallel Studio XE for Windows* before 2019 Gold, enabling an authenticated local attacker to potentially escalate privileges. Intel’...
CVE-2018-3705
CVE-2018-3705 affects Intel® System Defense Utility (all versions). The vulnerability arises from improper directory permissions in the installer, which could allow an authenticated local attacker to cause a denial of service. Intel’s advisory INTEL-SA-00209 states there are no mitigations/update...
CVE-2018-18093
Intel VTune Amplifier 2018 for Windows (Update 3 and earlier) contains an elevation of privilege vulnerability due to improper installer file permissions, allowing a local unprivileged user to potentially gain privileged access. Intel’s advisory INTEL-SA-00194 confirms the issue and advises updat...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Flash Player installer. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review Adobe Security Bulletin APSB18-...
Design/Logic Flaw
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...
CVE-2018-7112
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...
CVE-2018-7112
The CVE-2018-7112 flaw affects HPE ProLiant servers (Gen9/Gen8, G7, G6) via the Windows firmware installer and related system ROM/iLO components. Root cause: local disclosure of privileged information due to the HPE Windows firmware installer. Remediation: updated firmware installers released in ...
CVE-2018-7112
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...
[SECURITY] [DLA 1602-1] nsis security update
Package : nsis Version : 2.46-10+deb8u1 CVE ID : CVE-2015-9267 CVE-2015-9268 Among others, Andre Heinicke from gpg4win.org found several issues of nsis, a tool for creating quick and user friendly installers for Microsoft Windows operating systems. The issues are fixed by ... ... using...
Rakuten Securities MARKETSPEED Security Load Dynamic Link Library Vulnerability
Rakuten Securities MARKETSPEED is a foreign exchange-specific trading tool from Japan's Rakuten Securities Rakuten Securities. A security vulnerability exists in the installer in Rakuten Securities MARKETSPEED version 16.4 and earlier. An attacker could exploit the vulnerability to execute...
