Design/Logic Flaw

Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program program released on 2013 September 30 distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10823

CVE-2017-10823 affects the Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program (released 2011-03-10; distributed until 2017-05-17). The root cause is an insecure DLL search path (CWE-427) that may allow a Trojan DLL to be loaded, enabling arbitrary code execution with the user’s privileges. ...

CVE-2017-2289

CVE-2017-2289 affects Qua station connection tool for Windows, installer (version 1.00.03). A DLL search path issue (CWE-427) in the installer allows loading a Trojan DLL from an untrusted directory, enabling arbitrary code execution with the invoking user’s privileges. Documents from JVN/JVNDB i...

CVE-2017-2289

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10822

The CVE-2017-10822 entries describe an untrusted DLL search path vulnerability in the Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (released 2013-09-30; distribution until 2017-05-17). Root cause: insecure DLL loading (CWE-427) in the installer, allowing arbitrary code exec...

CVE-2017-10821

CVE-2017-10821 concerns the Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program. The connected sources describe an untrusted DLL search path (CWE-427) vulnerability in the installer, allowing arbitrary code execution via a Trojan DLL placed in the same directory. Affected software: t...

Installer of Shin Kikan Toukei Houkoku Data Untrusted Search Path Vulnerability

Shin Kinkyuji Houkoku Data Nyuryoku Program is a data entry program for basic statistical reports for the petroleum industry from the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path...

Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program Untrusted Search Path Vulnerability

Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program is a basic statistical report program for the petroleum industry by the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path vulnerabili...

Shin Kinkyuji Houkoku Data Nyuryoku Program Untrustworthy Search Path Vulnerability

Shin Kinkyuji Houkoku Data Nyuryoku Program is a data entry program for basic statistical reports for the petroleum industry from the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path...

Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability ...

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...

Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...

JVN#71104430: Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege...

JVN#23546631: Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the use...

Bye Bye Password,1.0.4,Information Disclosure

Bye Bye Password by Ready Bytes, versions 1.0.4 and previous, Information Disclosure Also the installer includes a tracking script...

CVE-2017-12892

Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-12892

Foxit PDF Compressor installers (versions 7.0.0.183 through 7.7.2.10) are affected by a DLL preloading vulnerability. The issue arises because the installer can load a malicious DLL located in its current working directory, enabling potential code execution during installation. CVE-2017-12892 is ...

App Layering - Google Chrome / Chromium Recipe

Google Chrome by default will install into a user profile which is problematic for mass deployment in a layer. However Google does provide an “offline” installer that installs Chrome into “Program Files” and this installer should be used with Unidesk if installing into a layer. The default way...

Sandboxie installer DLL hijacking vulnerability

Sandboxie is a virtualization software from the American company Sandboxie Holdings. The software supports running other applications in an isolated space and prevents programs from making changes to the system.Sandboxie installer is an installer for Sandboxie. A DLL hijacking vulnerability exist...

Installer of Qua station connection tool for Windows may insecurely load Dynamic Link Libraries

Overview Qua station provided KDDI CORPORATION is a 4G LTE photostrage. Qua station connection tool is used to view data saved on Qua station from a PC and/or save data on a PC. Installer of Qua station connection tool for Windows contains an issue with the DLL search path, which may lead to...