EUVD-2018-1379

Malware in sbrugna...

SoundEngine Free Installer Untrustworthy Search Path Vulnerability

SoundEngine Free is a suite of software for voice recording and audio editing for the Windows platform.Installer is its installation program. An untrusted search path vulnerability exists in the Installer in SoundEngine Free 5.21 and earlier versions. An attacker can exploit this vulnerability to...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0562

Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0562

Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0562

CVE-2018-0562 relates to an untrusted search path in the SoundEngine Free installer (versions ≤ 5.21). The root cause is DLL search order allowing a malicious DLL placed in an unspecified directory to be loaded, enabling arbitrary code execution with the privileges of the user invoking the instal...

CVE-2018-0562

Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Installer of SoundEngine Free may insecurely load Dynamic Link Libraries

Overview Installer of SoundEngine Free contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warni...

JVN#85056623: Installer of SoundEngine Free may insecurely load Dynamic Link Libraries

Installer of SoundEngine Free contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use the latest installer...