CVE-2010-3129
uTorrent <= 2.0.3 - DLL Hijacking via Trojan Horse DLL in Torrent File Directory
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3129. PoCs published by Dr_IDE, TheLeader.
AI-analyzed exploit summary This exploit demonstrates DLL hijacking in uTorrent <=2.0.3 by listing vulnerable DLLs that can be replaced with malicious payloads. The exploit executes with user credentials when the renamed DLL is placed in the uTorrent directory.
Description
Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.
Exploits (2)
This exploit demonstrates DLL hijacking in uTorrent <=2.0.3 by listing vulnerable DLLs that can be replaced with malicious payloads. The exploit executes with user credentials when the renamed DLL is placed in the uTorrent directory.
This exploit leverages DLL hijacking in uTorrent <= 2.0.3 by placing a malicious 'plugin_dll.dll' in the same directory as a .torrent or .btsearch file. When the file is opened, the DLL executes arbitrary code (e.g., launching calc.exe).