| Title | OpenSight Software LLC FlashFXP 5.4.0.3970 DLL Hijacking |
|---|
| Description | Description:
A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application.
Title: FlashFXP 5.4.0.3970 (libcrypto-1_1.dll) Hijacking exploit
Author: Jozic Manuel Espinoza Rivera
Instructions:
1. Compile dll
2. Replace libcrypto-1_1.dll in FlashFXP directory with your newly compiled dll
3. Launch the FlashFXP executable (FlashFXP.exe)
4. Boom have been hijacked! |
|---|
| User | tfhm (UID 58605) |
|---|
| Submission | 10/08/2024 00:57 (2 years ago) |
|---|
| Moderation | 10/17/2024 08:12 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 280716 [OpenSight Software FlashFXP 5.4.0.3970 FlashFXP.exe uncontrolled search path] |
|---|
| Points | 17 |
|---|