CVE-2010-3132: Undefined Security Weakness

Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc90loc.dll or 2 dwmapi.dll that is located i...

CVE-2010-3136: Undefined Security Weakness

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file...

Microsoft Windows 'CWDIllegalInDllSearch' Registry Setting

Windows Hosts can be hardened against DLL hijacking attacks by setting the The 'CWDIllegalInDllSearch' registry entry in to one of the following settings: - 0xFFFFFFFF Removes the current working directory from the default DLL search order - 1 Blocks a DLL Load from the current working directory ...

InterVideo WinDVD 5 DLL Hijacking Exploit

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Ganesha Site : www.BeenuArora.com Exploit Title: InterVideo WinDVD 5 DLL Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , WinDVD 5 Vulnerable extensions: .ifo , .mpg Compi...

Google Earth 5.1.3535.3218 DLL Hijacking Exploit

/ Google Earth v5.1.3535.3218 quserex.dll DLL Hijacking Exploit Vendor: Google Inc. Product Web Page: http://www.google.com Affected Version: 5.1.3535.3218 Summary: Google Earth lets you fly anywhere on Earth to view satellite imagery, maps, terrain, 3D buildings, from galaxies in outer space to...

Nvidia Driver DLL Hijacking Exploit

/ Nvidia Driver nview.dll Dll Hijacking Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://www.nvidia.com/Download/index.aspx?lang=en-us Details: Compile the following code and rename it to nview.dll and place file with one of the affected types in the same directory of the dll Affected...

Roxio MyDVD 9 DLL Hijacking Exploit

/ Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o HomeUtils9.dll MyDVD9-DLL.c .dmsd and .dmsm files are affected. / include define DllExport...

Opera 10.61 DLL Hijacking Exploit

/ Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .xht .xhtm .xhtl dwmapi.dll is used i...

Adobe Dreamweaver CS5 DLL Hijacking Exploit

Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.adobe.com Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVO...

Windows Program Group DLL Hijacking Exploit

/ Exploit Title: Windows Program Group DLL Hijacking Exploit imm.dll Date: 25/08/2010 Author: Alvaro Ovalle Email: aovalle at zoho dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .grp / include int run WinExec"calc", SWSHOW; exit0; return 0; BOOL WINAPI DllMainHINSTANCE...

CVE-2010-3128: Undefined Security Weakness

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

CVE-2010-3124: Undefined Security Weakness

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-3135: Undefined Security Weakness

Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file...

CVE-2010-3127: Undefined Security Weakness

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...

CVE-2010-3129: Undefined Security Weakness

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugindll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll,...

Microsoft Windows Contacts DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows Contacts DLL Hijacking Exploit wab32res.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o wab32res.dll Contacts-DLL.c .contact, .group, .p7c, .vcf, and .wab files are...

PuTTY 0.60 DLL Hijacking Exploit

/ Exploit Title: PuTTY DLL Hijacking Exploit winmm.dll Date: August 25, 2010 Author: storm [email protected] Version: 0.60 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o winmm.dll PuTTY-DLL.c -DWIN32LEANANDMEAN PuTTY is a standalone program, so just plop the .dl...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

CorelDRAW X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description CorelDRAW X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extensions are .cmx and .csl thru crlrib.dll library. / CorelDRAW X3...

Safari 5.0.1 DLL Hijacking Exploit

Version: Safari 5.0.1 Tested on: Windows XP SP3 Author : Secfence Exploit By: Vinay Katoch, Secfence Technologies www.secfence.com http://twitter.com/secfence Place a .htm .mht .mhtml .xht .xhtm .xhtl file and dwmapi.dll in same folder and run file in safari. Code for dwmapi.dll: /----------/ /...