Lenovo Driver Management 代码问题漏洞

Lenovo Driver Managemen is a Lenovo power management driver for Windows 10, 8.1, 8, 7 32-bit, 64-bit from Lenovo China. A security vulnerability exists in Lenovo Driver Management, which stems from a DLL preloading vulnerability in Lenovo Driver Management prior to version 2.9.0719.1104 that allo...

McAfee Agent 5.x prior to 5.7.3 Multiple Vulnerabilities (SB10362)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.x prior to 5.7.3. It is, therefore, affected by the following vulnerabilities: - An improper privilege management vulnerability exists due to a local user having the ability to edit the...

Vulnerabilities fixed in McAfee Agent for Windows

Vulnerabilities have been fixed in McAfee Agent for Windows. A malicious party could potentially exploit the vulnerability with CVE attribute CVE-2021-31840 potentially exploit it to execute arbitrary code with elevated privileges via a "DLL preloading" attack. The vulnerability with CVE attribut...

McAfee Agent Code Issue Vulnerability (CNVD-2021-49069)

The McAfee McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator the antivirus management platform and managed products. A security vulnerability exists in McAfee Agent in versions prior to 5.7.3. The vulnerability stems...

CVE-2021-31840

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid...

CVE-2021-31840

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid...

Code injection

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid...

CVE-2021-31840 DLL preload vulnerability in McAfee Agent for Windows

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid...

CVE-2021-31840

CVE-2021-31840 affects McAfee Agent for Windows prior to 5.7.3, where the DLL preloading mechanism allows a local, authenticated attacker to load unsigned DLLs, gain elevated privileges, and execute arbitrary code. The issue is tied to the preloading path of specific DLLs within McAfee Agent; Red...

McAfee Agent代码问题漏洞

The McAfee McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator the antivirus management platform and managed products. A security vulnerability exists in McAfee Agent in versions prior to 5.7.3. The vulnerability stems...

Monero: Misconfiguration in build environment allows DLL preloading attack

Summary: monero-wallet-gui.exe tries to dynamically load some dynamic link librariesDLL which are not present in the applications directory, so LoadLibraryA system-call will search other directories such as Windows root and %PATH% for them. An attacker can gain arbitrary code execution if he/she...

HPSBHF03665 rev. 3 - Realtek Audio Driver Security Update

Potential Security Impact Escalation of Privilege, Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has been notified of a potential vulnerability with the Realtek High Definition Audio Driver for Windows, which may lead to DLL preloading and...

Realtek Audio Driver Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-30506 Potential Impact: DLL preloading and potential abuses Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-19705 Summary Description: Realtek has released a software security update for the Realtek Audio Drivers for Windows. This update...

Realtek Audio Driver Vulnerability - Lenovo Support US

No description provided...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

PT-2020-10226 · Realtek +2 · Realtek Audio Driver +2

Name of the Vulnerable Software and Affected Versions: Realtek Audio Drivers for Windows versions prior to 6.0.8882.1 Realtek Audio Drivers for Windows versions prior to 6.0.8907.1 Description: The issue concerns the mishandling of DLL preloading by Realtek Audio Drivers for Windows, as used in...

CVE-2016-5311

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloadin...

Privilege escalation

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloadin...

CVE-2016-5311

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloadin...