12285 matches found
CVE-2019-16413
A flaw was found in the implementation of the 9p filesystem in the Linux kernel. The 9p filesystem does not protect isizewrite properly, which causes an isizeread infinite loop. An attacker, able to mount a specially crafted filesystem, could cause a denial of service on SMP systems. Mitigation A...
Foxit PDF Editor DLL Hijacking Vulnerability
Foxit PDF Editor is a PDF file editing software. Foxit PDF Editor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...
CVE-2013-3942
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
Remote code execution
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
CVE-2013-3942
CVE-2013-3942 affects PotPlayer prior to 1.5.39659. The vulnerability is a DLL loading Arbitrary Code Execution vulnerability rooted in the way the player loads DLLs. Public references in the connected documents describe the impact as arbitrary code execution, with an indication of potential expl...
CVE-2013-3942
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
CVE-2013-3942: Untrusted Search Path
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
PT-2020-7472
Name of the Vulnerable Software and Affected Versions: Potplayer versions prior to 1.5.39659 Description: The issue allows for arbitrary code execution due to a DLL loading vulnerability. Recommendations: For versions prior to 1.5.39659, update to version 1.5.39659 or later to resolve the issue...
Integer overflow
Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607...
PT-2020-9478
Name of the Vulnerable Software and Affected Versions: Snapdragon Industrial IOT versions in MDM9206, MDM9607 Description: The issue arises during module loading when allocating memory, leading to an integer overflow that results in a buffer overflow. Recommendations: For Snapdragon Industrial IO...
CVE-2019-14051: Integer Overflow or Wraparound
Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607...
Abusing DLL Misconfigurations — Using Threat Intelligence to Weaponize R&D
DLL Abuse Techniques Overview Dynamic-link library DLL side-loading occurs when Windows Side-by-Side WinSxS manifests are not explicit about the characteristics of DLLs being loaded by a program. In layman’s terms, DLL side-loading can allow an attacker to trick a program into loading a malicious...
SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c
A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...
TrendMicro Anti-Threat Toolkit Improper Fix
Hi @ll, on September 29, 2019, John Page reported a remote code execution with escalation of privilege in TrendMicro's Anti-Threat Toolkit to its vendor. TrendMicro assigned CVE-2019-9491 to this vulnerability and told the reporter, his dog and the world on October 18, 2019, that they had fixed t...
PSF-2020-7 CVE-2020-8315: Unsafe DLL loading in getpathp.c on Windows 7
In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...
Denial Of Service (DoS)
wordpress is vulnerable to denial of service. The vulnerability exists in because an unauthenticated attacker is able to crash the application by submitting a large list of registered .js files to cause each file to be loaded multiple times, leading to excessive resource consumption...
CVE-2019-17099
An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1485)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-6592
A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and...
