| शीर्षक | mp3tag 3.26.0.0 Uncontrolled Search Path |
|---|
| विवरण | # Exploit Title: - DLL Hijacking
# Date: 23/07/2024
# Exploit Author: Daniel Soriano
# Vendor Homepage: https://www.mp3tag.de/en/contact.html
# Version: x.x.x.x
# Tested on: Windows
A DLL hijacking vulnerability has been discovered in MP3TAG Version x.x.x.x
When a user open the Mp3tag.exe file, the application will load the following DLL from the same directory:
tak_deco_lib.dll
Using a crafted DLL, it is possible to execute arbitrary code in the context of the current logged in user. |
|---|
| स्रोत | ⚠️ https://app.any.run/tasks/37401db6-5584-4f21-8cc5-73240c4ea2dc/ |
|---|
| उपयोगकर्ता | daniel.soriano (UID 72214) |
|---|
| सबमिशन | 24/07/2024 07:20 AM (2 साल पहले) |
|---|
| संयम | 28/07/2024 04:08 PM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 272614 [Mp3tag तक 3.26d DLL tak_deco_lib.dll अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|