Eiji James Yoshida

The issue is related to the DLL search path in the installer, which may lead to insecurely loading Dynamic Link Libraries. This was reported on an end-of-life version of the product.

The issue is related to the insecure loading of the d3dx9 41.dll library when opening .pps files, specifically due to 'current directory type' DLL loading. This can allow an attacker to elevate privileges and execute arbitrary code.

The issue is related to the insecure loading of the `shcore.dll` dynamic library by the installer of WPS Office, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. This can potentially lead to privilege escalation and the execution of malicious code.

The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of `msjet49.dll` loaded by the vulnerable products.

The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of `ykkapi.dll` loaded by the vulnerable products.

The issue concerns an untrusted search path vulnerability in the installer. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The issue allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory due to an untrusted search path vulnerability.

The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability in the installers for the affected software.

The issue concerns an untrusted search path vulnerability in the Vivaldi installer for Windows. This vulnerability allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000, XP, and Server 2003 Description: A cross-site scripting issue exists due to the Indexing Service in Microsoft Windows. When the Encoding option is set to Auto Select, remote attackers can inject arbitrary web script or HTML via a UTF-7 encoded URL. This encoded URL is then injected into an error message with a charset set to UTF-7. Recommendations: For Microsoft Windows 2000, XP, and Server 2003, consider disabling the Indexing Service or setting the Encoding option to a value other than Auto Select to mitigate the risk of exploitation. Restrict access to the Indexing Service to minimize the risk of remote attackers injecting arbitrary web script or HTML.

A directory traversal issue exists in the "Shell Folders" capability, allowing remote attackers to read arbitrary files by utilizing .. (dot dot) sequences in a "shell:" link.