CVE-2017-2206

Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2212

Untrusted search path vulnerability in TKY2JGD TKY2JGD1379.EXE ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2209

Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 For the first installation The version which was available on the website from 2017 April 4 to 2017 May 18 and ver2.0 and later For the first installation The versions which were available on the websit...

CVE-2017-2219

The CVE-2017-2219 entry concerns the Simeji for Windows installer (simeji.exe). The root cause is an insecure DLL search path (CWE-427) in the installer, enabling an attacker to gain privileges by placing a Trojan horse DLL in an unspecified directory. Reported impact: arbitrary code could be exe...

CVE-2017-2206

CVE-2017-2206 affects SaAT Netizen installer prior to ver.1.2.10.510. The issue is an insecure DLL search path (CWE-427) in the installer, enabling arbitrary code execution with the invoking user’s privileges via a Trojan horse DLL in an unspecified directory. Affected component: installer’s DLL ...

CVE-2017-2210

Untrusted search path vulnerability in PatchJGD PatchJGD101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2178

Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2211

Untrusted search path vulnerability in PatchJGD Hyoko PatchJGDh101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2219

Untrusted search path vulnerability in the Simeji for Windows installer simeji.exe allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2207

Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2190

Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2192

The CVE-2017-2192 issue affects Sharp RW-5100 family tools used to verify execution environment on Windows 7 (1.1.0.0) and Windows 8.1 (1.2.0.0). The vulnerability is an untrusted DLL search path (CWE-427) that can allow arbitrary code execution with the user’s privileges due to loading a Trojan ...

CVE-2017-2192

Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2191

Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-7818

CVE-2016-7818 is an Untrusted search path vulnerability in Japan Pension Service installers: Specification check program (social insurance) v9.00 and earlier, TODOKESHO print program v5.00 and earlier, Device data encryption program v1.00 and earlier, and TODOKESHO creation program v15.00 and ear...

Threat Round-up for June 2 - June 9

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 02 and June 09. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior characteristics,...

First Android-Rooting Trojan With Code Injection Ability Found On Google Play Store

A new Android-rooting malware with an ability to disable device’ security settings in an effort to perform malicious tasks in the background has been detected on the official Play Store. What's interesting? The app was smart enough to fool Google security mechanism by first pretending itself to b...

The vulnerabilities in the Skype instant messaging program allow a hacker to execute arbitrary code.

The numerous vulnerabilities in the Skype instant messaging program are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor, operating locally, to execute arbitrary code using Trojan programs and files such as msi.dll, dpapi.dll, or cryptui.dll,...

Beware! This Microsoft PowerPoint Hack Installs Malware Without Requiring Macros

"Disable macros and always be extra careful when you manually enable it while opening Microsoft Office Word documents." You might have heard of above-mentioned security warning multiple times on the Internet as hackers usually leverage this decade old macros-based hacking technique to hack...

CSRF vulnerability exists in Aisooki enterprise website builder system V2.1

Aisok universal enterprise building system cicms is based on PHP + Mysql development of an enterprise website management system. CSRF vulnerability exists in Aisooker General Enterprise Website Builder System V2.1. An attacker can exploit this vulnerability to forge form links and trick...