Cyber Security Week in Review (Feb. 15, 2019)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign up for our Threat Source newsletter here. Top headlines this week Email provider VFEmail says i...

Design/Logic Flaw

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an...

CVE-2019-5913

Untrusted search path vulnerability in the installer of LHMelting LHMelting for Win32 Ver 1.65.3.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of LHMelting LHMelting for Win32 Ver 1.65.3.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16189

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16189

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16190

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an...

CVE-2019-5912

Untrusted search path vulnerability in the installer of UNARJ32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5913

Untrusted search path vulnerability in the installer of LHMelting LHMelting for Win32 Ver 1.65.3.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of UNARJ32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of UNLHA32.DLL UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5912

Untrusted search path vulnerability in the installer of UNARJ32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5911

Untrusted search path vulnerability in the installer of UNLHA32.DLL UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16190

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an...

CVE-2019-5911

Untrusted search path vulnerability in the installer of UNLHA32.DLL UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5913

Untrusted search path vulnerability in the installer of LHMelting LHMelting for Win32 Ver 1.65.3.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5911

CVE-2019-5911 affects UNLHA32.DLL (Win32, versions up to 2.67.1.2) where the installers insecurely load DLLs due to an untrusted DLL search path, enabling arbitrary code execution with the invoking user’s privileges. The issue is a DLL search path/LoadLibrary flaw (CWE-427) in the installer workf...

CVE-2019-5912

Untrusted search path vulnerability in the installer of UNARJ32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5911

Untrusted search path vulnerability in the installer of UNLHA32.DLL UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...