CVE-2010-3146

CVE-2010-3146 corresponds to the Microsoft Groove 2007 insecure library loading vulnerability. Multiple OpenVAS/SecPod/SAINT entries confirm that Groove 2007 (SP2) loads untrusted libraries from the current working directory when opening .vcg or .gta files, specifically mso.dll or GroovePerfmon.d...

Microsoft Windows Based Script Host (Plugin.ocx) DLL Hijacking

Exploit for windows platform in category local exploits ============================================================== Microsoft Windows Based Script Host Plugin.ocx DLL Hijacking ==============================================================...

CVE-2010-3144: Undefined Security Weakness

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...

CVE-2010-3146: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse 1 mso.dll or 2 GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard .vcg or Groove Tool Archive .gta...

Adobe Dreamweaver CS5 DLL Hijacking Exploit

Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.adobe.com Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVO...

PuTTY 0.60 DLL Hijacking Exploit (winmm.dll)

No description provided by source. / Exploit Title: PuTTY DLL Hijacking Exploit winmm.dll Date: August 25, 2010 Author: storm [email protected] Version: 0.60 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o winmm.dll PuTTY-DLL.c -DWIN32LEANANDMEAN PuTTY is a...

Avast! 5.0.594 License Files DLL Hijacking Exploit

Exploit Title: avast! license files DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.avast.com Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOI...

Adobe Photoshop CS2 DLL Hijacking Exploit

/ Exploit Title: Adobe Photoshop CS2 DLL Hijacking Exploit Wintab32.dll Date: August 25, 2010 Author: storm [email protected] Version: CS2 9.0 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o Wintab32.dll...

Microsoft Windows Contacts DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows Contacts DLL Hijacking Exploit wab32res.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o wab32res.dll Contacts-DLL.c .contact, .group, .p7c, .vcf, and .wab files are...

PuTTY 0.60 DLL Hijacking Exploit

/ Exploit Title: PuTTY DLL Hijacking Exploit winmm.dll Date: August 25, 2010 Author: storm [email protected] Version: 0.60 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o winmm.dll PuTTY-DLL.c -DWIN32LEANANDMEAN PuTTY is a standalone program, so just plop the .dl...

PuTTY 0.60 DLL Hijacking Exploit (winmm.dll)

Exploit for windows platform in category local exploits ============================================ PuTTY 0.60 DLL Hijacking Exploit winmm.dll ============================================ / Exploit Title: PuTTY DLL Hijacking Exploit winmm.dll Date: August 25, 2010 Author: storm email protected...

Adobe Photoshop CS2 DLL Hijacking Exploit (Wintab32.dll)

Exploit for windows platform in category local exploits ======================================================== Adobe Photoshop CS2 DLL Hijacking Exploit Wintab32.dll ======================================================== / Exploit Title: Adobe Photoshop CS2 DLL Hijacking Exploit Wintab32.dll...

Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)

Exploit for windows platform in category local exploits ===================================================================== Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll ===================================================================== / Exploit Title: Microsoft Office...

Microsoft Windows - Contacts wab32res.dll DLL Hijacking

Microsoft Windows - Contacts wab32res.dll DLL Hijacking / Exploit Title: Microsoft Windows Contacts DLL Hijacking Exploit wab32res.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o wab32res.dll Contacts-DLL....

Roxio MyDVD 9 - HomeUtils9.dll DLL Hijacking

Roxio MyDVD 9 - HomeUtils9.dll DLL Hijacking / Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o HomeUtils9.dll MyDVD9-DLL.c .dmsd and .dmsm file...

Microsoft PowerPoint 2007 - rpawinet.dll DLL Hijacking

Microsoft PowerPoint 2007 - rpawinet.dll DLL Hijacking / Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc...

Roxio Creator DE - HomeUtils9.dll DLL Hijacking

Roxio Creator DE - HomeUtils9.dll DLL Hijacking / Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Version: 9.0.116 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2...

Roxio MyDVD 9 DLL Hijacking Exploit (HomeUtils9.dll)

Exploit for windows platform in category local exploits ==================================================== Roxio MyDVD 9 DLL Hijacking Exploit HomeUtils9.dll ==================================================== / Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit HomeUtils9.dll Date: August 25,...

Adobe Dreamweaver CS5 <= 11.0 build 4909 DLL Hijacking (mfc90loc.dll)

Exploit for windows platform in category local exploits ===================================================================== Adobe Dreamweaver CS5 Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved main; return 0;...

Roxio Creator DE DLL Hijacking Exploit (HomeUtils9.dll)

Exploit for windows platform in category local exploits ======================================================= Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll ======================================================= / Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date...