Vulners
Lucene search
OutSystems Service Studio 11.53.30 DLL Hijacking
🗓️ 11 Aug 2023 00:00:00Reported by Carlo Di DatoType 
packetstorm🔗 packetstormsecurity.com👁 375 Views
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | OutSystems Service Studio 11.53.30 - DLL Hijacking Vulnerability | 10 Aug 202300:00 | – | zdt |
 | CVE-2022-47636 | 10 Aug 202316:15 | – | attackerkb |
 | CVE-2022-47636 | 10 Aug 202320:16 | – | circl |
 | OutSystems Service Studio Code Issue Vulnerability | 10 Aug 202300:00 | – | cnnvd |
 | CVE-2022-47636 | 10 Aug 202300:00 | – | cve |
 | CVE-2022-47636 | 10 Aug 202300:00 | – | cvelist |
 | OutSystems Service Studio 11.53.30 - DLL Hijacking | 10 Aug 202300:00 | – | exploitdb |
 | EUVD-2022-50395 | 3 Oct 202520:07 | – | euvd |
 | CVE-2022-47636 | 10 Aug 202316:15 | – | nvd |
 | CVE-2022-47636 | 10 Aug 202316:15 | – | osv |
10
`# Exploit Title: OutSystems Service Studio 11.53.30 - DLL Hijacking
# Date: 2023-08-09
# Exploit Author: Carlo Di Dato for Deloitte Risk Advisory Italia
# Vendor Homepage: https://www.outsystems.com/
# Version: Up to 11.53.30 (Build 61739)
# Tested on: Windows
# CVE : CVE-2022-47636
A DLL hijacking vulnerability has been discovered in OutSystems Service
Studio 11 11.53.30 build 61739.
When a user open a .oml file (OutSystems Modeling Language), the
application will load the following DLLs from the same directory:
av_libGLESv2.dll
libcef.DLL
user32.dll
d3d10warp.dll
Using a crafted DLL, it is possible to execute arbitrary code in the
context of the current logged in user.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Aug 2023 00:00Current
7.1High risk
Vulners AI Score7.1
EPSS0.00126