iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll

Document Title: =============== iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1415 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9600 CVE-ID: ======= CVE-2014-9600 Release Date:...

CVE-2014-9600

CVE-2014-9600 — Macroplant iExplorer 3.6.3.0 suffers from an untrusted search path vulnerability that enables local users to execute arbitrary code via the Trojan horse itunesmobiledevice.dll, enabling DLL hijacking. The root cause is loading a malicious DLL due to an improperly trusted search pa...