InterVideo WinDVD 5 DLL Hijacking Exploit

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Ganesha Site : www.BeenuArora.com Exploit Title: InterVideo WinDVD 5 DLL Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , WinDVD 5 Vulnerable extensions: .ifo , .mpg Compi...

Google Earth 5.1.3535.3218 DLL Hijacking Exploit

/ Google Earth v5.1.3535.3218 quserex.dll DLL Hijacking Exploit Vendor: Google Inc. Product Web Page: http://www.google.com Affected Version: 5.1.3535.3218 Summary: Google Earth lets you fly anywhere on Earth to view satellite imagery, maps, terrain, 3D buildings, from galaxies in outer space to...

Nvidia Driver DLL Hijacking Exploit

/ Nvidia Driver nview.dll Dll Hijacking Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://www.nvidia.com/Download/index.aspx?lang=en-us Details: Compile the following code and rename it to nview.dll and place file with one of the affected types in the same directory of the dll Affected...

Roxio MyDVD 9 DLL Hijacking Exploit

/ Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o HomeUtils9.dll MyDVD9-DLL.c .dmsd and .dmsm files are affected. / include define DllExport...

Opera 10.61 DLL Hijacking Exploit

/ Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .xht .xhtm .xhtl dwmapi.dll is used i...

Adobe Dreamweaver CS5 DLL Hijacking Exploit

Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.adobe.com Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVO...

Microsoft Windows Movie Maker 2.6.4038.0 DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows Movie Maker define DLLIMPORT declspec dllexport int evil WinExec"calc", 0; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved evil; return 0;...

Windows Program Group DLL Hijacking Exploit

/ Exploit Title: Windows Program Group DLL Hijacking Exploit imm.dll Date: 25/08/2010 Author: Alvaro Ovalle Email: aovalle at zoho dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .grp / include int run WinExec"calc", SWSHOW; exit0; return 0; BOOL WINAPI DllMainHINSTANCE...

CVE-2010-3128: Undefined Security Weakness

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

Microsoft Windows Contacts DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows Contacts DLL Hijacking Exploit wab32res.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o wab32res.dll Contacts-DLL.c .contact, .group, .p7c, .vcf, and .wab files are...

PuTTY 0.60 DLL Hijacking Exploit

/ Exploit Title: PuTTY DLL Hijacking Exploit winmm.dll Date: August 25, 2010 Author: storm [email protected] Version: 0.60 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o winmm.dll PuTTY-DLL.c -DWIN32LEANANDMEAN PuTTY is a standalone program, so just plop the .dl...

Safari 5.0.1 DLL Hijacking Exploit

Version: Safari 5.0.1 Tested on: Windows XP SP3 Author : Secfence Exploit By: Vinay Katoch, Secfence Technologies www.secfence.com http://twitter.com/secfence Place a .htm .mht .mhtml .xht .xhtm .xhtl file and dwmapi.dll in same folder and run file in safari. Code for dwmapi.dll: /----------/ /...

CVE-2010-3129: Undefined Security Weakness

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugindll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll,...

CVE-2010-3124: Undefined Security Weakness

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

wscript.exe DLL Hijacking Exploit

wscript.exe XP DLL Hijacking Exploit wshfra.dll Author : Mohamed Clay Greetz : linuxac.org && isecur1ty.org && security4arabs.com && v4-team.com && all My Friends note : EveryOne is happy with DLL Hijacking YooooPiiii!!!! Tested on: Windows XP How to use : Place a .jse file and wshfra.dll in same...

Autodesk AutoCAD 2007 DLL Hijacking Exploit

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...

CVE-2010-3127: Undefined Security Weakness

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...

CVE-2010-3135: Undefined Security Weakness

Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

Microsoft Office PowerPoint 2007 v12.0.4518 (pp4x322.dll) DLL Hijacking Exploit

Summary Microsoft PowerPoint is a presentation program by Microsoft. It is part of the Microsoft Office suite, and runs on Microsoft Windows and Apple's Mac OS X operating system. Description MS PowerPoint 2007 suffers from a dll hijacking vulnerability that enables the attacker to execute...