CVE-2010-3143

This exploit demonstrates a DLL hijacking vulnerability in Microsoft Windows Contacts by creating a malicious wab32res.dll that executes arbitrary code (calc.exe) when loaded by affected file types (.contact, .group, .p7c, .vcf, .wab). The DllMain function triggers the payload upon DLL initialization.

This exploit demonstrates a DLL hijacking vulnerability in Microsoft Address Book by creating a malicious wab32res.dll that executes arbitrary code (calc.exe) when a file with a vulnerable extension (.wab, .p7c) is opened. The exploit leverages the insecure DLL loading mechanism in Windows.

This exploit demonstrates a DLL hijacking vulnerability in Microsoft Windows 7's wab.exe by replacing the legitimate wab32res.dll with a malicious one. When a file with specific extensions is opened, the malicious DLL executes arbitrary code (calc.exe in this case).