CVE-2010-3137: Undefined Security Weakness

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

CVE-2010-3134: Undefined Security Weakness

Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll that is located in the same folder as a .kmz file...

Media Player Classic 6.4.9.1 DLL Hijacking Exploit

/ Media Player Classic 6.4.9.1 iacenc.dll DLL Hijacking Exploit Vendor: Gabest Product Web Page: http://sourceforge.net/projects/guliverkli Affected Version: 6.4.9.1 revision 73 Summary: Media Player Classic MPC is a compact media player for 32-bit Microsoft Windows. The application mimics the lo...

Adobe Device Central CS5 v3.0.1.0 (dwmapi.dll) DLL Hijacking Exploit

Summary Adobe® Device Central CS5 software simplifies the production of innovative and compelling content for mobile phones and consumer electronics devices. Adobe Device Central CS5 now offers support for HTML and the latest versions of Adobe Flash® Player software. Description Adobe Device...

Google Earth v5.1.3535.3218 (quserex.dll) DLL Hijacking Exploit

Summary Google Earth lets you fly anywhere on Earth to view satellite imagery, maps, terrain, 3D buildings, from galaxies in outer space to the canyons of the ocean. You can explore rich geographical content, save your toured places, and share with others. Description Google Earth suffers from a...

Corel PHOTO-PAINT X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description Corel PHOTO-PAINT X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .cpt thru crlrib.dll library. / Corel PHOTO-PAINT X3...

Microsoft Visio 2010 v14.0.4514.1004 (dwmapi.dll) DLL Hijacking Exploit

Summary Microsoft Visio is a diagramming program for Microsoft Windows that uses vector graphics to create diagrams. Description MS Visio 2010 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .vss thru...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 DLL Hijacking Exploit

/ Adobe ExtendedScript Toolkit CS5 v3.5.0.52 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v3.5.0.52 ExtendScript 4.1.23 ScriptUI 5.1.37 Summary: The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with...

TeamViewer 5.0.8703 DLL Hijacking Exploit

/ Exploit Title: TeamViewer define DllExport declspec dllexport BOOL WINAPI DllMain HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved dllhijack; return 0; int dllhijack MessageBox0, "TeamViewer DLL Hijacking!", "DLL Message", MBOK; return 0;...

CVE-2010-3130: Undefined Security Weakness

Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file...

Adobe Extension Manager CS5 5.0.298 DLL Hijacking Exploit

/ Adobe Extension Manager CS5 v5.0.298 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v5.0.298 Summary: Easily install new extensions and manage the ones you already have with the Adobe Extension Manager. Desc: Adobe...

Microsoft Windows 7 wab.exe DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Version: 6.1.7600 and prior Tested on: Windows 7 x86 6.1.7600 There's a chance this one works with vista. Instructions: Compile and rename to...

Mozilla Thunderbird 3.1.2 DLL Hijacking Exploit

/ Exploit Title: Mozilla Thunderbird DLL Hijacking Exploit dwmapi.dll Date: 26/08/2010 Author: h4ck3r47 http://twitter.com/hxteam Version: Latest Mozilla Thunderbird 3.1.2 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .html / include defin...

Demon Tool Lite DLL Hijacking Exploit

Demon tool lite DLL Hijacking Exploit mfc80loc.dll Author : Mohamed Clay Greetz : linuxac.org && isecur1ty.org && security4arabs.com && v4-team.com && all My Friends note : EveryOne is happy with DLL Hijacking YooooPiiii!!!! Tested on: Windows XP How to use : Place a .mds file and mfc80loc.dll in...

Adobe InDesign CS4 DLL Hijacking Exploit (ibfs32.dll)

/ Exploit Title: Adobe InDesign CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v6.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .indl .indp .indt .inx Greetz: Astalavista, OffSEC, Exploit-DB / include...

Firefox <= 3.6.8 DLL Hijacking Exploit [dwmapi.dll]

/ Exploit Title: Firefox = 3.6.8 DLL Hijacking Exploit dwmapi.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Firefox v3.6.8 Tested on: Windows XP SP3 En Vulnerable extensions: .htm .html .jtx .mfp Greetz: Astalavista, OffSEC, Exploit-DB / include...

TeamViewer <= 5.0.8703 DLL Hijacking Exploit (dwmapi.dll)

/ Exploit Title: TeamViewer = 5.0.8703 DLL Hijacking Exploit dwmapi.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest TeamViewer 5.0.8703 Tested on: Windows XP SP3 En Vulnerable extensions: .tvs .tvc Greetz: Astalavista, OffSEC, Exploit-DB / include...

Firefox 3.6.8 DLL Hijacking Exploit

/ Exploit Title: Firefox define DllExport declspec dllexport DllExport void CPAcquireContext pwn; DllExport void DWMAPI100 pwn; DllExport void DWMAPI101 pwn; DllExport void DwmEnableComposition pwn; DllExport void DWMAPI103 pwn; DllExport void DWMAPI104 pwn; DllExport void DWMAPI105 pwn; DllExpor...

Wireshark 1.2.10 DLL Hijacking Exploit

/ Exploit Title: Wireshark define DLLIMPORT declspec dllexport DLLIMPORT void AirpcapGetDeviceList evil; DLLIMPORT void AirpcapFreeDeviceList evil; DLLIMPORT void AirpcapOpen evil; DLLIMPORT void AirpcapClose evil; DLLIMPORT void AirpcapGetLinkType evil; DLLIMPORT void AirpcapSetLinkType evil;...

Microsoft Power Point 2010 DLL Hijacking Exploit

/ Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit pptimpconv.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://office.microsoft.com/en-us/powerpoint/ Version: 14.0.4760.1000 Tested on: Windows 7 x86 6.1.7600 Compile and rename to...