CVE-2010-3124
VLC Media Player < 1.1.3 - Untrusted Search Path and DLL Hijacking via wintab32.dll
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3124. PoCs published by Secfence, KOBUKOVUI.
AI-analyzed exploit summary This exploit leverages a DLL hijacking vulnerability in VLC Player (CVE-2010-3124) by placing a malicious wintab32.dll in the same directory as an .mp3 file. When the .mp3 is opened in VLC, the DLL is loaded and executes arbitrary code (a MessageBox in this case).
Description
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file.
Exploits (2)
This exploit leverages a DLL hijacking vulnerability in VLC Player (CVE-2010-3124) by placing a malicious wintab32.dll in the same directory as an .mp3 file. When the .mp3 is opened in VLC, the DLL is loaded and executes arbitrary code (a MessageBox in this case).
This repository contains functional exploit code demonstrating DLL injection via CVE-2010-3124, an untrusted search path vulnerability in VLC Media Player 1.1.3 and earlier. The PoC leverages a malicious wintab32.dll placed alongside an MP3 file to achieve arbitrary code execution.