CVE-2019-17449

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges...

PT-2019-15158 · Avira · Avira Software Updater +1

Name of the Vulnerable Software and Affected Versions: Avira Software Updater versions prior to 2.0.6.21094 Description: The issue allows a DLL side-loading attack. It is noted that exploiting this would require at least administrator privileges and would gain only SYSTEM privileges. There are...

CVE-2019-17449: Untrusted Search Path

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges...

Cisco IOS XE Image Verification Malware Installation

The vulnerability of the Image Verification function in the Cisco IOS XE operating system is related to the lack of verification of file signatures during the system’s loading process. Exploiting this vulnerability allows a perpetrator to install malware onto a vulnerable device or load malicious...

Secure Boot Disclosure Information

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to errors in accessing debugging functions during the loading process. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the security measures...

PT-2019-4206 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.8 Description: The issue is related to four memory leaks in the acp hw init function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be triggered by failures in m...

Apple iOS and Apple Safari WebKit Page Loading Component Cross-Site Scripting Vulnerability

Apple Safari and Apple iOS are both products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS. Apple iOS is a suite of operating systems developed for mobile devices. WebKit Page Loading is a page loading component. A cross-site scripting...

'Narrator' Windows Utility Trojanized to Gain Full System Control

A suspected Chinese advanced persistent threat APT group has been spotted attacking tech companies using a trojanized screen-reader application, replacing the built-in Narrator “Ease of Access” feature in Windows. According to BlackBerry Cylance, the attackers also deploy a version of the...

[SECURITY] Fedora 29 Update: SDL2_image-2.0.5-2.fc29

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a simple library for loading images of various formats BMP, PPM, PCX, GIF, JPEG, PNG as SDL surfaces...

Upgrading to Storefront 3.12 CU4 fails - MSI logs shows Citrix Protocol Transition service exception

When attempting to upgrade Storefront 3.12 LTSR to CU4 fails. In the Install wizard the following message is displayed: When checking the MSI Installer logs the following exception is found NOTE: MSI logs are found in C:\Windows\Temp\Storefront\CitrixMsi-CitrixStoreFront-x64-201X.-xx-xx-xx.log...

CVE-2019-6826

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product...

CVE-2019-6826: Untrusted Search Path

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product...

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

Code injection

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

CVE-2019-8076

The CVE-2019-8076 entry concerns Adobe Application Manager (AAM) installer version 10.0 with an Insecure Library Loading (DLL hijacking) vulnerability that could allow Arbitrary Code Execution in the current user context. Multiple sources corroborate that the flaw is located in the AAM installer ...

PT-2019-5832

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.R18 Description The issue is related to the use of an untrusted path when loading dynamic link libraries DLLs, which can be exploited to execute arbitrary code. This can be achieved by placing a...

Adobe Application Manager unsafe library loading (dll hijacking) vulnerability

Adobe Application Manager AAM is an application for managing Adobe products from the American company Audobee Adobe. The program is mainly used to manage the installation of Adobe products, updates and so on. Adobe Application Manager suffers from an insecure library loading DLL hijacking...

Description of the security update for SharePoint Server 2019: September 10, 2019

None None...

Debian DSA-4521-1 : docker.io - security update

Three security vulnerabilities have been discovered in the Docker container runtime: Insecure loading of NSS libraries in 'docker cp'could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection vulnerability in the 'docker...

APSB19-45 Security update available for Adobe Application Manager

Adobe has released a security update for the Adobe Application Manager installer for Windows. This update resolves an insecure library loading vulnerability in the installer that could lead to Arbitrary Code Execution...