CVE-2010-3131

This exploit demonstrates a DLL hijacking vulnerability in Mozilla Thunderbird 3.1.2 by creating a malicious dwmapi.dll that executes arbitrary code (calc.exe) when loaded by the application. The exploit targets vulnerable extensions (.eml, .html) on Windows XP SP3.

This exploit demonstrates a DLL hijacking vulnerability in Firefox <= 3.6.8 by creating a malicious dwmapi.dll that executes arbitrary code when Firefox loads it. The PoC uses exported functions from dwmapi.dll to trigger a MessageBox popup, proving the vulnerability.