Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries

Overview Installer of Yahoo! Toolbar for Internet explorer contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

JVN#02852421: Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries

Installer of Yahoo! Toolbar for Internet explorer contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the Latest Installer Use the...

SWFTools Denial of Service Vulnerability (CNVD-2017-15102)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...

Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries

Overview File Compact provided by SOURCENEXT CORPORATION is compression/decompression software. It can also create self-extracting archive files. Self-extracting archive files created by File Compact contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link...

Rope Hero: Vice Town - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Rope Hero: Vice Town published at the 'play' market has multiple vulnerabilities...

8 Ball Pool Instant Rewards - Free coins - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application 8 Ball Pool Instant Rewards - Free coins published at the 'play' market has multiple vulnerabilities...

Mail.ru: [FG-VD-17-115] Mail.ru's Amigo Browser DLL Pre-Loading Vulnerability Notification

Amigo browser installer before version 2.0.0.257 was vulnerable to DLL planting vulnerability. Amigo browser is not currently in the scope of the Mail.Ru Bug Bounty program...

Plants vs. Zombies™ Heroes - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Plants vs. Zombies™ Heroes published at the 'play' market has multiple vulnerabilities...

Snapchat - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Snapchat published at the 'play' market has multiple vulnerabilities...

Installer and self-extracting archive containing the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system may insecurely load Dynamic Link Libraries

Overview The installer and the self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability...

Schneider Electric Pro-Face WinGP Arbitrary Code Execution Vulnerability

Pro-Face GP Pro-Server EX is the HMI development software of choice for supporting dedicated and open HMI PC-based solutions. An arbitrary code execution vulnerability exists in Schneider Electric Pro-Face WinGP, which can be exploited by an attacker to force the process to load an arbitrary DLL...

JVN#06337557: Installer and self-extracting archive containing the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system may insecurely load Dynamic Link Libraries

The installer and the self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the us...

Final Fantasy XV: A New Empire - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Final Fantasy XV: A New Empire published at the 'play' market has multiple vulnerabilities...

Android loading image processing service DoS

The vulnerability of the Android operating system’s image loading processing service arises from a loss of precision in integer arithmetic. Exploiting this vulnerability can allow an attacker to cause the device to freeze and restart remotely...

Android Code Execution

The vulnerability of NVIDIA’s loading driver and the Android operating system’s power management chip is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code during the loading process and the power management by the...

Cisco AnyConnect Secure Mobility Client DLL Loading Privilege Escalation

The vulnerability related to the loading of DLL files in the Cisco AnyConnect Secure Mobility Client encryption solution stems from deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to install or execute a DLL file with privileges equivalen...

Android Firmware Loading DoS

The vulnerability in the loading of Android operating system firmware files is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

JVN#09293613: Installer of Charamin OMP may insecurely load Dynamic Link Libraries

The installer of Charamin OMP provided by Charamin steering committee contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

اضافات بلاك بيري - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application اضافات بلاك بيري published at the 'play' market has multiple vulnerabilities...

CVE-2017-3090

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution...