Microsoft Windows Indeo Filter 'iacenc.dll' DLL Loading Arbitrary Code Execution Vulnerability
BID:42730
Info
Microsoft Windows Indeo Filter 'iacenc.dll' DLL Loading Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 42730 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 25 2010 12:00AM |
| Updated: | Sep 01 2010 06:35PM |
| Credit: | Encrypt3d.M!nd, Secunia |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Professional x64 Edition SP3 Microsoft Windows XP Professional SP3 Microsoft Windows XP Media Center Edition SP3 Microsoft Windows XP Home SP3 Microsoft Windows XP Embedded SP3 guliverkli Media Player Classic 1.3.2189.0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows Indeo Filter 'iacenc.dll' DLL Loading Arbitrary Code Execution Vulnerability
Microsoft Windows is prone to a vulnerability that affects the Indeo filter ('iac25_32.ax') and lets attackers execute arbitrary code.
An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
The issue affects Windows XP SP3 including 'iac25_32.ax' version 2.0.5.53.
Please note that this BID was initially created for Mediaplayer Classic. The entry was updated as the issue affects the Indeo filter which is used by Mediaplayer Classic and potentially other applications.
Microsoft Windows is prone to a vulnerability that affects the Indeo filter ('iac25_32.ax') and lets attackers execute arbitrary code.
An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
The issue affects Windows XP SP3 including 'iac25_32.ax' version 2.0.5.53.
Please note that this BID was initially created for Mediaplayer Classic. The entry was updated as the issue affects the Indeo filter which is used by Mediaplayer Classic and potentially other applications.
Exploit / POC
Microsoft Windows Indeo Filter 'iacenc.dll' DLL Loading Arbitrary Code Execution Vulnerability
The following exploits are available:
The following exploits are available:
Solution / Fix
Microsoft Windows Indeo Filter 'iacenc.dll' DLL Loading Arbitrary Code Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft Windows Indeo Filter 'iacenc.dll' DLL Loading Arbitrary Code Execution Vulnerability
References:
References:
- Application DLL Load Hijacking (HD Moore)
- Exploiting DLL Hijacking Flaws (hdm)
- Media Player Classic Homepage (guliverkli)
- Microsoft Security Advisory 2269637 Released (Microsoft)
- More information about the DLL Preloading remote attack vector (Microsoft)
- Microsoft Security Advisory (2269637) (Microsoft)
- Microsoft Security Bulletin MS12-014 (Microsoft)