CVE-2016-4477

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

CVE-2016-4477

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

DEBIAN-CVE-2016-4477

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

CVE-2016-4477

CVE-2016-4477 affects wpa_supplicant (and hostapd) when updating WPA/WPA2 passphrases: input containing newline/control characters can cause the updated configuration to execute code or disrupt service. In practice, this enables local privilege escalation via the control interface (SET_NETWORK) a...

CVE-2016-4477

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

UBUNTU-CVE-2016-4477

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

Cisco WebEx Productivity Tools Search Path Handling Vulnerability

Cisco WebEx Productivity Tools is a set of tools for adding a user's application to a WebEx Meetings session. Cisco WebEx Productivity Tools fails to handle search paths correctly, allowing local attackers to build multiple malicious cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll,...

The vulnerability of the Microsoft .NET Framework software platform, which allows a perpetrator to enhance their privileges

The vulnerability of the Microsoft .NET Framework software platform is related to improper handling of library loading. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2016-02244)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

CVE-2016-0148

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

CVE-2016-0148

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

Remote code execution

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

CVE-2016-0148

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

CVE-2016-0148

CVE-2016-0148 affects Microsoft .NET Framework 4.6 and 4.6.1, arising from insecure library loading (DLL loading) in the framework’s DLL handling (notably mscoreei.dll). The vulnerability could let a local attacker execute arbitrary code by persuading a user to run a crafted application (remote c...

Adobe Flash Player Insecure Library Loading (APSB16-10: CVE-2016-1014)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insecure library loading while handling certain files. A remote attacker could exploit this issue by enticing a user to open a legitimate file that will insecurely load a specially crafted D...

Microsoft Windows Library Load Input Validation Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Vista SP2 and Server 2008 SP2, which stems from a program's failure to properly validate input before loading certain libraries. A remot...

CVE-2016-0100

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

Remote code execution

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

CVE-2016-0100

CVE-2016-0100 is a local-privilege-escalation vulnerability in Microsoft Windows (Vista SP2 and Server 2008 SP2) caused by mishandling library loading. A crafted application could leverage improper input validation during library loading to gain elevated privileges. The issue is fixed by MS16-025...

CVE-2016-0100

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...