Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-5241. PoCs published by xsploited security.
AI-analyzed exploit summary This exploit demonstrates DLL hijacking in Autocad 2007 by replacing the legitimate 'color.dll' with a malicious DLL that executes 'calc.exe' upon loading. The DllMain function triggers the payload when the DLL is loaded by the application.
Description
Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates DLL hijacking in Autocad 2007 by replacing the legitimate 'color.dll' with a malicious DLL that executes 'calc.exe' upon loading. The DllMain function triggers the payload when the DLL is loaded by the application.