Multiple Avast Product DLL Load Local Code Injection Vulnerabilities

Avast Pro Antivirus and others are antivirus programs from the Czech company Avast. A local code injection vulnerability exists in several Avast products. A local attacker could use this vulnerability to execute arbitrary code in the context of a system running in an affected program to gain full...

McAfee Security Scan Plus (SSP) Elevation of Privilege Vulnerability

Intel Security McAfeeSecurity ScanPlus SSP is a free set of diagnostic tools from Intel Corporation formerly McAfee, Inc.. The product proactively checks for up-to-date antivirus, firewall, and Web security software in your computer so that you always know if your computer is secure so that it is...

Multiple VMware Workstation Product DLL Load Remote Code Execution Vulnerability

VMware Workstation is a virtual machine software product from VMware. A DLL loading remote code execution vulnerability exists in multiple VMware Workstation products. An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges, and a failed attack could result i...

Windows DLL Loading Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete...

Rapid7 AppSpider Pro DLL Preloading Vulnerability

Rapid7 Nexpose is a suite of vulnerability management software from Rapid7 USA that can synthesize different scans to deeply probe a network. The software proactively scans configuration environments for errors, vulnerabilities, malware and provides guidance to reduce risk. A DLL preloading...

CVE-2017-5234

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5232

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5235

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

Rapid7 Insight Collector DLL Loading Remote Code Execution Vulnerability

Rapid7 is the world's leading security risk information solution for vulnerability management, vulnerability scanning, vulnerability assessment and penetration testing. The Rapid7 Insight Collector DLL is loaded with a remote code execution vulnerability that can be exploited by a remote attacker...

Scada-os Configuration Software dll Hijacking Vulnerability

Scada-os is a SCADA system developed by several SCADA configuration software engineers. The TsStudio.exe component of the Scada-os configuration software is not safe to load library files, so an attacker can construct a malicious application and place it in a specific path, which will allow the...

PDfAdd DLL Hijacking Vulnerability

PDfAdd is a free geometric drawing tool. A DLL hijacking vulnerability exists in PDfAdd version 1.2, which can be exploited by local attackers to inject code or gain advanced access...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, o...

Kingsoft PDF Exploit Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF has a release reuse vulnerability. As a result of opening the document, the document business processing block there is a business object reference count, resulting in the document object is not released, resulting in memory leakage to form this...

Multiple Symantec Products DLL Load Local Elevation of Privilege Vulnerability

Symantec IT Management Suite is a suite for reducing the cost and complexity of enterprise IT asset management. the Symantec Ghost Solution Suite addresses cross-platform disk imaging and deployment needs. A DLL load local elevation of privilege vulnerability exists in multiple Symantec products....

Installer of 7-Zip for Windows may insecurely load Dynamic Link Libraries

Overview 7-Zip for Windows is an open source compression and decompression software. The installer of 7-Zip for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this...

The installer of e-Tax Software may insecurely load Dynamic Link Libraries

Overview The installer of e-Tax Software provided by National Tax Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the...

010editor 7.0 x64 version has dll hijacking vulnerability

010Editor is a software for the Mac operating system. 010editor version 7.0 x64 suffers from a dll hijacking vulnerability, 010editor will load the mpr.dll file at startup, which can be exploited by an attacker to spoof an mpr.dll file to execute arbitrary code...

Snort Arbitrary Code Execution Vulnerability

Snort is a set of network intrusion prevention software and network intrusion detection software from Snort team. The software provides packet sniffing, packet analysis and packet detection. Snort arbitrary code execution vulnerability. A remote attacker can exploit this vulnerability to execute...

Aura Video Converter DLL Hostage Vulnerability

Aura Video Converter is a video converter. Aura Video Converter version 1.6.3 suffers from a DLL hostage vulnerability that allows a local attacker to inject code into a database to gain higher privileges on the system...

AuraDVD Ripper Professional DLL Hostage Vulnerability

Aura DVD Ripper Professional is an easy-to-use DVD video converter. Aura DVD Ripper Professional 1.6.3 suffers from a DLL hostage vulnerability that allows a local attacker to inject code into the database to gain higher privileges on the system...