CVE-2010-3130

Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file...

CVE-2010-3131

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...

CVE-2010-3135

CVE-2010-3135 describes an untrusted search path vulnerability in Cisco Packet Tracer 5.2. A Trojan wintab32.dll placed in the same folder as a .pkt or .pkz file can be loaded, allowing local users and potentially remote attackers to execute arbitrary code via DLL hijacking. The vulnerability ari...

CVE-2010-3126

This CVE affects Avast! Free Antivirus up to version 5.0.594, where an insecure library loading/untrusted search path vulnerability allows local (and possibly remote) attackers to hijack DLLs by placing a Trojan mfc90loc.dll beside the avast license file (mfc90loc.dll in the same folder as .avast...

CVE-2010-3136

CVE-2010-3136 affects Skype on Windows (v4.2.0.169 and earlier). The vulnerability is an untrusted search path that enables DLL hijacking by a Trojan wab32.dll located in the same folder as a .skype file, allowing arbitrary code execution with local access (and potentially remote exposure). Multi...

CVE-2010-3137

CVE-2010-3137 targets Winamp 5.581 (and potentially other versions) via an untrusted search path: a Trojan wnaspi32.dll placed in the same folder as specific media files (.669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf, .cda) can enable DLL hijacking and arbitrary code execution. The connected Ope...

Some Linux Distros Vulnerable to Version of DLL Hijacking Bug

In the wake of all of the stories about the Windows DLL hijacking bug, it appears that certain Linux distributions may be vulnerable to a similar problem related to the way that Linux handles a specific variable in some cases. The bug apparently was introduced via a Debian patch last year. The...

DLL Hijacking: Facts and Fiction

It’s been interesting watching DLL hijacking grow from interesting phenomena to a full-on snowball of hype and FUD over the last few days. As of this writing Google turns up 152 news articles on the subject. The vast majority of coverage is calling this a “new class of attack” and pointing out ho...

uTorrent 2.0.3 DLL Hijacking Exploit

/ Exploit Title: uTorrent define DLLIMPORT declspec dllexport DLLIMPORT void hookstartup evil; int evil WinExec"calc", 0; exit0; return 0;...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

Adobe Device Central CS5 v3.0.1.0 (dwmapi.dll) DLL Hijacking Exploit

Summary Adobe® Device Central CS5 software simplifies the production of innovative and compelling content for mobile phones and consumer electronics devices. Adobe Device Central CS5 now offers support for HTML and the latest versions of Adobe Flash® Player software. Description Adobe Device...

Google Earth v5.1.3535.3218 (quserex.dll) DLL Hijacking Exploit

Summary Google Earth lets you fly anywhere on Earth to view satellite imagery, maps, terrain, 3D buildings, from galaxies in outer space to the canyons of the ocean. You can explore rich geographical content, save your toured places, and share with others. Description Google Earth suffers from a...

Corel PHOTO-PAINT X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description Corel PHOTO-PAINT X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .cpt thru crlrib.dll library. / Corel PHOTO-PAINT X3...

Microsoft Visio 2010 v14.0.4514.1004 (dwmapi.dll) DLL Hijacking Exploit

Summary Microsoft Visio is a diagramming program for Microsoft Windows that uses vector graphics to create diagrams. Description MS Visio 2010 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .vss thru...

Ettercap NG 0.7.3 DLL Hijacking Exploit

/ Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: REMOVED BY REQUEST OF AUTHOR Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit http://chaossecurity.wordpress.com/ /...

Cisco Packet Tracer 5.2 DLL Hijacking Exploit

/ Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll Date:05/08/2010 Author: CCNA Tested on: Windows XP SP 2 Extension: .pkt .pkz Greets: xokaido, hex, hektor, classical / include define DllExport declspec dllexport DllExport void WTInfoA theCode; DllExport void WTOpenA theCode;...

Microsoft Office PowerPoint 2007 DLL Hijacking Exploit

/ Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o rpawinet.dll PowerPoint-DLL.c .odp, .pothtm...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

// Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Date: 25 Aug 2010 // Author: Kolor // Software Link: http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner65.exe // Version: 6.5.20100616 // Tested on: Windows 7 64bit Eng // Vuln ext.: .WVS saved report include defin...

VLC Media Player DLL Hijacking Exploit

Exploit Title: VLC Player DLL Hijack Vulnerability Date: 25 Aug 2010 Author: Secfence Version: VLC Tested on: Windows XP Place a .mp3 file and wintab32.dll in same folder and execute .mp3 file in vlc player. Code for wintab32.dll: /----------/ / wintab32.cpp / include "stdafx.h" include "dragon.h...

CVE-2010-3125: Undefined Security Weakness

Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .tmx file...