| 标题 | VSO Software ConvertXtoDVD 7.0.0.83 DLL Hijacking |
|---|
| 描述 | # Title: VSO Software - ConvertXtoDVD - DLL Hijacking
# Author: Julio Aviña
# Vendor site: https://es.vso-software.fr/
# Download URL: https://es.vso-software.fr/download_product_direct.php?product=convertxtodvd
# Version: x.x.x.x
# Tested on: Windows 10 x64
A DLL hijacking vulnerability has been discovered in ConvertXtoDvd version 7.0.0.83.
Upon installing the application, when a user opens the ConvertXtoDvd.exe file, the application will load the following DLL from the same directory:
avcodec.dll
By using a crafted DLL, an attacker can execute arbitrary code in the context of the currently logged-in user. |
|---|
| 用户 | Anonymous User |
|---|
| 提交 | 2024-10-09 08時23分 (2 年前) |
|---|
| 管理 | 2024-10-17 18時13分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 280758 [VSO ConvertXtoDvd 7.0.0.83 ConvertXtoDvd.exe 权限提升] |
|---|
| 积分 | 17 |
|---|