The installer of Microsoft Teams may insecurely load Dynamic Link Libraries

Overview The installer of Microsoft Teams contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting", thus there is no plan to release a...

The vulnerability of the Visual Studio C++ Redistributable installation program allows a perpetrator to execute arbitrary code.

The vulnerability of the Visual Studio C++ Redistributable software installation program is related to incorrect handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the malicious DLL library...

CVE-2018-18913

Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location...

Microsoft Visual Studio RCE Vulnerability (Mar 2019)

This host is missing an important security update according to Microsoft Security Update March-2019. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2019-07333)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio 2017 15.9 that stems from th...

Go DLL Injection Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. An injection vulnerability exists in Google Go 1.12 and earlier versions for Windows platforms, which stems from the program incorrectly using the LoadLibrary function. An attacke...

Kudou Music Box PC client software suffers from a dll file loading vulnerability

Kudou Music Box is a music resource aggregator and player that combines the functions of song and MV search, download, online playback, lyrics synchronization display and so on. A dll file loading vulnerability exists in the Kudou Music Box PC client software, which can be exploited by attackers ...

Lovecraft Video pc client software has dll file loading vulnerability

Aqiyi Video is a client software under Aqiyi that focuses on video playback. The Aiki Video pc client software suffers from a dll file loading vulnerability, which can be exploited by an attacker to execute an arbitrary code DLL file on the target system using malware...

Rockwell Automation RSLinx Classic Buffer Overflow Vulnerability

Rockwell Automation RSLinx Classic is a factory communications solution from Rockwell Automation. The solution supports access to RockwellSoftware, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A stack buffer overflow vulnerability exists in the .dll file in Rockwel...

Microsoft Teams Dynamic Link Library Unsafe Loading Vulnerability

Microsoft Teams is a unified communications platform that combines continuous workplace chat, video conferencing, file storage and application integration. An unsafe loading of dynamic link libraries vulnerability exists in the Microsoft Teams installer. An attacker could exploit the vulnerabilit...

Microsoft Windows 7 Dynamic Link Library Unsafe Loading Vulnerability

Windows 7 is an operating system developed by Microsoft with the kernel version number Windows NT 6.1. Microsoft Windows 7 suffers from an insecure loading of dynamic link libraries vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted DLL files...

NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US

No description provided...

The Fileless, Non-Malware Menace

There’s an old expression: if it looks like a duck, walks like a duck, and quacks like a duck, then it must be a duck. What happens, though, if the duck in question is malware that doesn’t behave like typical malware? Namely, it doesn’t drop a file on your disk to infect your computer, hijack...

CVE-2018-15983

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

The vulnerability of the pcwin.dll library in temperature control software, related to a data type mismatch error, allows a hacker to execute code remotely.

The vulnerability of the pcwin.dll library in the GUI temperature control software is related to a data type mismatch error. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the syntactic analysis of the GD1 file...

CVE-2018-6668

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-5202

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code...

The vulnerability of the DLL component of Cisco AMP’s security tools for end devices allows a malicious actor to disable the security services and system scanning functions.

The vulnerability of the DLL component used by Cisco AMP’s security tools for end devices relates to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely disable security services and system scanning services using a specially crafted DLL file...

Adobe Flash Player Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to elevate...

CVE-2018-6263

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library DLL during application installation, which may lead to escalation of privileges...