Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-3138. PoCs published by LiquidWorm, Encrypt3d.M!nd.
AI-analyzed exploit summary This exploit demonstrates a DLL hijacking vulnerability in Media Player Classic 6.4.9.1 by providing a malicious iacenc.dll that executes arbitrary code when loaded via vulnerable file extensions (.mka, .ra, .ram). The PoC compiles into a DLL that displays a message box upon execution.
Description
Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit demonstrates a DLL hijacking vulnerability in Media Player Classic 6.4.9.1 by providing a malicious iacenc.dll that executes arbitrary code when loaded via vulnerable file extensions (.mka, .ra, .ram). The PoC compiles into a DLL that displays a message box upon execution.
This exploit leverages DLL hijacking in MediaPlayer Classic 1.3.2189.0 by renaming a malicious DLL to 'iacenc.dll' and placing it in the same directory as an affected media file. The DLL exports a function that executes 'calc.exe' upon startup, demonstrating arbitrary code execution.