The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries

Overview The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems J-LIS contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Note that this...

Installer of Vivaldi for Windows may insecurely load executable files

Overview The installer of Vivaldi for Windows contains an issue in the file search path when loading files, which may insecurely load executable files CWE-427. Eiji James Yoshida of Security Professionals Network Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

Vulnerability Disclosure: Vivaldi installer for Windows could run arbitrary downloaded code (JVN#71572107)

Recently, JP-CERT, the Japanese security vulnerability clearing house, brought to our attention a security vulnerability when they forwarded information about a problem in Vivaldi's installer for Windows. The installer for Vivaldi on Windows for releases prior to version 1.7.735.48 could run...

CVE-2017-6459

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...

CVE-2017-6452

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...

Stack overflow

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...

CVE-2017-6459

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...

CVE-2017-6452

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...

CVE-2017-6452

Removed by vendor...

CVE-2017-6452

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...

CVE-2017-6452

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...

NTP Local Denial of Service Vulnerability (CNVD-2017-04411)

NTP is Network Time Protocol NTP, which is a protocol used to synchronize the time of individual computers on a network. A local denial of service vulnerability exists in NTP, where the Windows installer of NTP enables a local user to cause a denial of service via a route related to a parameter...

MS12-021: Description of the security update for Visual Studio 2010 Service Pack 1: March 13, 2012

MS12-021: Description of the security update for Visual Studio 2010 Service Pack 1: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

MS12-021: Description of the security update for Visual Studio 2008 Service Pack 1: March 13, 2012

MS12-021: Description of the security update for Visual Studio 2008 Service Pack 1: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework that coul...

MS15-048: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET...

MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These...

CVE-2016-7086

The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory...

CVE-2016-7292

The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a...

MS16-149: Security Update for Microsoft Windows (3205655)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in a Windows Crypto driver running in kernel mode due to improper handling of objects in memory. A local attacker can exploit this, via a...