EUVD-2017-17986

Malware in sbrugna...

CVE-2017-9046

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

Code injection

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

CVE-2017-9046

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

CVE-2017-9046

CVE-2017-9046 affects Pegasus Mail (winpm-32.exe) v4.72 build 572. A DLL load flaw in ssgp.dll on the desktop enables remote via a crafted DLL to execute code when a user clicks a mailto: link from a remote page. Exploitation relies on locally installed ssgp.dll; DllMain is the execution point. M...

CVE-2017-9046

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

Pegasus winpm-32.exe v4.72 Mailto: Link Remote Code Execution Vulnerability

Exploit for windows platform in category remote exploits + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PEGASUS-MAILTO-LINK-REMOTE-CODE-EXECUTION.txt + ISR: APPARITIONSEC Vendor: ============= www.pmail.com Product:...

CVE-2012-4754

CVE-2012-4754 affects MindManager 2012 (version 10.0.493). The issue is an untrusted search path vulnerability where local users can gain privileges via a Trojan horse placed in the current working directory (notably using either ssgp.dll or dwmapi.dll), demonstrated by a directory containing a ....