Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3967. PoCs published by TheLeader.
AI-analyzed exploit summary This exploit leverages DLL hijacking in Microsoft Windows Movie Maker by placing a malicious hhctrl.ocx in a crafted directory structure, leading to arbitrary code execution (calc.exe) when a .mswmm file is opened.
Description
Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."
Exploits (1)
This exploit leverages DLL hijacking in Microsoft Windows Movie Maker by placing a malicious hhctrl.ocx in a crafted directory structure, leading to arbitrary code execution (calc.exe) when a .mswmm file is opened.