Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9416. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a DLL hijacking vulnerability in Huawei eSpace Desktop by creating a malicious DLL that loads when the application attempts to load specific libraries. The PoC spawns a calculator as a proof of arbitrary code execution.
Description
Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc71enu.dll, (2) mfc71loc.dll, (3) tcapi.dll, or (4) airpcap.dll.
Exploits (1)
This exploit demonstrates a DLL hijacking vulnerability in Huawei eSpace Desktop by creating a malicious DLL that loads when the application attempts to load specific libraries. The PoC spawns a calculator as a proof of arbitrary code execution.