CVE-2010-3137
Nullsoft Winamp 5.581 - Untrusted Search Path and DLL Hijacking via Trojan Horse wnaspi32.dll
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-3137. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a DLL hijacking vulnerability in Nullsoft Winamp 5.581 by providing a malicious wnaspi32.dll that executes arbitrary code when loaded by the application. The PoC compiles into a DLL that displays a message box upon execution, confirming the hijack.
Description
Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf or .cda file.
Exploits (1)
This exploit demonstrates a DLL hijacking vulnerability in Nullsoft Winamp 5.581 by providing a malicious wnaspi32.dll that executes arbitrary code when loaded by the application. The PoC compiles into a DLL that displays a message box upon execution, confirming the hijack.