CVE-2010-3131
Mozilla Firefox < & Thunderbird < & SeaMonkey <3.5.12-3.6.9 <3.0.7-3.1.3 - DLL Hijacking
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3131. PoCs published by h4ck3r#47, Glafkos Charalambous.
AI-analyzed exploit summary This exploit demonstrates a DLL hijacking vulnerability in Mozilla Thunderbird 3.1.2 by creating a malicious dwmapi.dll that executes arbitrary code (calc.exe) when loaded by the application. The exploit targets vulnerable extensions (.eml, .html) on Windows XP SP3.
Description
Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .htm, .html, .jtx, .mfp, or .eml file.
Exploits (2)
This exploit demonstrates a DLL hijacking vulnerability in Mozilla Thunderbird 3.1.2 by creating a malicious dwmapi.dll that executes arbitrary code (calc.exe) when loaded by the application. The exploit targets vulnerable extensions (.eml, .html) on Windows XP SP3.
This exploit demonstrates a DLL hijacking vulnerability in Firefox <= 3.6.8 by creating a malicious dwmapi.dll that executes arbitrary code when Firefox loads it. The PoC uses exported functions from dwmapi.dll to trigger a MessageBox popup, proving the vulnerability.