CVE-2018-0516

The CVE-2018-0516 issue concerns the FLET’S v4 / v6 address selection tool, where an untrusted DLL search path can allow an attacker to load a Trojan horse DLL from an insecure directory. The root cause is a DLL search path vulnerability (CWE-427) in the application/installer. The documented impa...

CVE-2018-0515

CVE-2018-0515 affects the installer of “FLET'S Azukeru Backup Tool” (versions up to 1.5.2.6). The root cause is an insecure DLL search path in the installer, which may allow arbitrary code execution with the user’s privileges. The vulnerability has been addressed in version 1.5.2.7 (2017-05-11). ...

Design/Logic Flaw

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-17010

CVE-2017-17010 affects Sony Interactive Entertainment Content Manager Assistant for PlayStation (version 3.55.7671.0901 and earlier). The issue is an untrusted search path vulnerability (CWE-427) in the installer/DLL loading process, allowing an attacker to gain privileges via a Trojan horse DLL ...

CVE-2017-10909

CVE-2017-10909 is a DLL search path (CWE-427) vulnerability in the Music Center for PC installer. Affected versions are 1.0.01 and earlier. The issue allows arbitrary code execution with the privileges of the user invoking the installer due to insecurely loading DLLs from an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-6803

An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application or user running with administrative privilege. Any installer with the unquoted...

Design/Logic Flaw

An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application or user running with administrative privilege. Any installer with the unquoted...

CVE-2016-6803

CVE-2016-6803 concerns an unquoted Windows search path vulnerability in the Windows installer of Apache OpenOffice prior to 4.1.3. The issue enables a delayed trigger for privilege escalation, requiring a Trojan Horse or user activity with administrative privileges on the PC. The vulnerability is...

CVE-2017-10885

CVE-2017-10885 affects HYPER SBI, where the installer has an insecure DLL search path (CWE-427) in Ver. 2.2 and earlier. This can allow arbitrary code execution with the invoking user’s privileges during installation. Affected component: the HYPER SBI installer; root cause: insecure DLL search or...

CVE-2017-10864

Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10863

Hitachi HIBUN Confidential File Decryption Program is affected by an untrusted search path vulnerability in versions prior to 10.50.0.5. The underlying issue allows a local attacker to gain privileges by placing a Trojan horse DLL in an exploitable directory, leveraged via a malicious DLL search ...

HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries

Overview HIBUN Confidential File Decryption program provided by Hitachi Solutions, Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Note that this vulnerability is different from JVN58909026. Eili Masami of Tachibana Lab. report...

Design/Logic Flaw

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path...

CVE-2017-13676

Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a...

CVE-2017-10860

CVE-2017-10860 affects i-filter 6.0 installer/installer components from Digital Arts. The issue is an untrusted search path vulnerability in the installer’s code signing timestamp (before 23 Aug 2017 JST) that can allow arbitrary code execution via a specially crafted executable in an unspecified...

CVE-2017-10859

CVE-2017-10859 corresponds to an untrusted search path vulnerability in Digital Arts’ i-filter 6.0 installer. The code-signing timestamp before 23 Aug 2017 (JST) enables privilege escalation via a Trojan DLL located in an unspecified directory, potentially allowing arbitrary code execution with t...

CVE-2017-10849

CVE-2017-10849 affects DocuWorks self-extracting documents generated by DocuWorks 8.0.7 and earlier. The underlying issue is an untrusted DLL search path that can allow a Trojan horse DLL placed in an unspecified directory to be loaded, enabling privilege escalation. The vulnerability is tied to ...

CVE-2017-10848

DocuWorks and DocuWorks Viewer Light are affected by an untrusted search path vulnerability (CWE-427) in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light vices published in July 2017 and earlier. An attacker could gain privilege escalation by placing a Trojan horse DLL in an ...

CVE-2017-10850

Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 Timestamp of code signing is before 12 Apr 2017 02:04 UTC., PostScript? Driver + Additional Feature Plug-in + PPD File for...