CVE-2016-0100
HIGHWindows Vista SP2 and Server 2008 SP2 - Local Privilege Escalation via Library Loading
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2016-0100.
Includes Metasploit module exploits/windows/fileformat/office_ole_multiple_dll_hijack.
AI-analyzed exploit summary This Metasploit module exploits multiple DLL side-loading vulnerabilities in various COM components by embedding a malicious OLE object in a crafted PPSX file. When opened, the file triggers the loading of a malicious DLL from the current directory, leading to arbitrary code execution.
Description
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."
Exploits (2)
This Metasploit module exploits multiple DLL side-loading vulnerabilities in various COM components by embedding a malicious OLE object in a crafted PPSX file. When opened, the file triggers the loading of a malicious DLL from the current directory, leading to arbitrary code execution.
This Metasploit module exploits multiple DLL side-loading vulnerabilities in various COM components by embedding a malicious OLE object in an Office document. It generates a payload DLL and crafts a PPSX file to trigger arbitrary code execution when opened from a directory containing the attacker's DLL.
References (3)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H