Vulners
Lucene search
OutSystems Service Studio 11.53.30 - DLL Hijacking
šļøĀ 10 Aug 2023Ā 00:00:00Reported byĀ shinnaiTypeĀ 
Ā exploitdbšĀ www.exploit-db.comšĀ 393Ā Views
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | OutSystems Service Studio 11.53.30 - DLL Hijacking Vulnerability | 10 Aug 202300:00 | ā | zdt |
 | CVE-2022-47636 | 10 Aug 202316:15 | ā | attackerkb |
 | CVE-2022-47636 | 10 Aug 202320:16 | ā | circl |
 | OutSystems Service Studio Code Issue Vulnerability | 10 Aug 202300:00 | ā | cnnvd |
 | CVE-2022-47636 | 10 Aug 202300:00 | ā | cve |
 | CVE-2022-47636 | 10 Aug 202300:00 | ā | cvelist |
 | EUVD-2022-50395 | 3 Oct 202520:07 | ā | euvd |
 | CVE-2022-47636 | 10 Aug 202316:15 | ā | nvd |
 | CVE-2022-47636 | 10 Aug 202316:15 | ā | osv |
 | OutSystems Service Studio 11.53.30 DLL Hijacking | 11 Aug 202300:00 | ā | packetstorm |
10
# Exploit Title: OutSystems Service Studio 11.53.30 - DLL Hijacking
# Date: 2023-08-09
# Exploit Author: Carlo Di Dato for Deloitte Risk Advisory Italia
# Vendor Homepage: https://www.outsystems.com/
# Version: Up to 11.53.30 (Build 61739)
# Tested on: Windows
# CVE : CVE-2022-47636
A DLL hijacking vulnerability has been discovered in OutSystems Service
Studio 11 11.53.30 build 61739.
When a user open a .oml file (OutSystems Modeling Language), the
application will load the following DLLs from the same directory:
av_libGLESv2.dll
libcef.DLL
user32.dll
d3d10warp.dll
Using a crafted DLL, it is possible to execute arbitrary code in the
context of the current logged in user.Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
10 Aug 2023 00:00Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.8
EPSS0.00126
SSVC