| 标题 | PeaZip PeaZip 9.4.0.0 DLL Hijacking |
|---|
| 描述 | # Exploit Title: - DLL Hijacking
# Date: 17/11/2023
# Exploit Author: Jozic Espinoza
# Vendor Homepage: https://peazip.github.io
# Version: x.x.x.x
# Tested on: Windows
A DLL hijacking vulnerability has been discovered in PeaZip Version x.x.x.x
When a user open the peazip.exe file, the
application will load the following DLL from the same directory:
dragdropfilesdll.dll
Using a crafted DLL, it is possible to execute arbitrary code in the
context of the current logged in user. |
|---|
| 用户 | tfhm (UID 58605) |
|---|
| 提交 | 2023-11-18 05時30分 (3 年前) |
|---|
| 管理 | 2023-12-16 13時51分 (28 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 248251 [PeaZip 9.4.0 Library dragdropfilesdll.dll 权限提升] |
|---|
| 积分 | 17 |
|---|