CVE-2010-3133

CVE-2010-3133 affects Wireshark up to 1.0.15 and 1.2.0 up to 1.2.10. The issue is an untrusted search path that enables DLL hijacking (notably via airpcap.dll and similar DLLs) when located in the same folder as a file that launches Wireshark, allowing arbitrary code execution for local users and...

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-3125

The CVE-2010-3125 issue affects TeamMate Audit Management Software Suite 8.0 patch 2, where an untrusted search path enables DLL hijacking via a Trojan horse mfc71enu.dll located in the same folder as a .tmx file. This allows local users or potentially remote attackers to execute arbitrary code. ...

CVE-2010-3132

Affected software: Adobe Dreamweaver CS5 (11.0) build 4916 and 4909, with likely other versions. Vulnerability type / root cause: Untrusted search path leading to DLL hijacking, where a Trojan horse DLL (mfc90loc.dll or dwmapi.dll) placed in the same folder as a file that automatically launches D...

CVE-2010-3134

CVE-2010-3134 affects Google Earth 5.1.3535.3218. The issue is an insecure/ untrusted search path that allows a local user (and potentially remote attacker via crafted files) to execute arbitrary code by placing a Trojan horse quserex.dll in the same folder as a .kmz file, enabling DLL hijacking....

CVE-2010-3129

CVE-2010-3129 affects uTorrent versions 2.0.3 and earlier, with an untrusted search path vulnerability that allows DLL hijacking via a Trojan horse DLL placed in the same folder as a .torrent or .btsearch file. The issue can enable arbitrary code execution for local users and possibly remote atta...

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-3128

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

CVE-2010-3133

Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder...

CVE-2010-3136

CVE-2010-3136 affects Skype on Windows (v4.2.0.169 and earlier). The vulnerability is an untrusted search path that enables DLL hijacking by a Trojan wab32.dll located in the same folder as a .skype file, allowing arbitrary code execution with local access (and potentially remote exposure). Multi...

CVE-2010-3128

TeamViewer 5.0.8703 and earlier is affected by an untrusted search path vulnerability that allows DLL hijacking via a trojan dwmapi.dll located in the same folder as a .tvs or .tvc file, enabling arbitrary code execution for local users and potentially remote attackers. The root cause is insecure...

CVE-2010-3127

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...

CVE-2010-3135

CVE-2010-3135 describes an untrusted search path vulnerability in Cisco Packet Tracer 5.2. A Trojan wintab32.dll placed in the same folder as a .pkt or .pkz file can be loaded, allowing local users and potentially remote attackers to execute arbitrary code via DLL hijacking. The vulnerability ari...

CVE-2010-3131

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...

CVE-2010-3126

This CVE affects Avast! Free Antivirus up to version 5.0.594, where an insecure library loading/untrusted search path vulnerability allows local (and possibly remote) attackers to hijack DLLs by placing a Trojan mfc90loc.dll beside the avast license file (mfc90loc.dll in the same folder as .avast...

CVE-2010-3137

CVE-2010-3137 targets Winamp 5.581 (and potentially other versions) via an untrusted search path: a Trojan wnaspi32.dll placed in the same folder as specific media files (.669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf, .cda) can enable DLL hijacking and arbitrary code execution. The connected Ope...

CVE-2010-3130

Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file...

Some Linux Distros Vulnerable to Version of DLL Hijacking Bug

In the wake of all of the stories about the Windows DLL hijacking bug, it appears that certain Linux distributions may be vulnerable to a similar problem related to the way that Linux handles a specific variable in some cases. The bug apparently was introduced via a Debian patch last year. The...

DLL Hijacking: Facts and Fiction

It’s been interesting watching DLL hijacking grow from interesting phenomena to a full-on snowball of hype and FUD over the last few days. As of this writing Google turns up 152 news articles on the subject. The vast majority of coverage is calling this a “new class of attack” and pointing out ho...

Microsoft Office PowerPoint 2007 DLL Hijacking Exploit

/ Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o rpawinet.dll PowerPoint-DLL.c .odp, .pothtm...