CVE-2010-3142

This exploit leverages DLL hijacking in Microsoft Office PowerPoint 2007 by replacing the legitimate 'rpawinet.dll' with a malicious version. The malicious DLL exports functions that trigger a call to 'WinExec' to launch 'calc.exe' when loaded by PowerPoint.

This exploit leverages DLL hijacking in Microsoft PowerPoint 2010 by replacing the legitimate pptimpconv.dll with a malicious version. When a user opens a PowerPoint file with specific extensions, the malicious DLL executes arbitrary code (e.g., launching calc.exe).