Internet Download Manager 'idmmkb.dll' DLL Loading Arbitrary Code Execution Vulnerability
BID:42849
Info
Internet Download Manager 'idmmkb.dll' DLL Loading Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 42849 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 30 2010 12:00AM |
| Updated: | Aug 30 2010 12:00AM |
| Credit: | germaya_x |
| Vulnerable: |
Internet Download Manager Corp. Internet Download Manager 4.0 5 Internet Download Manager Corp. Internet Download Manager 4.0 4 Internet Download Manager Corp. Internet Download Manager 4.0 3 Internet Download Manager Corp. Internet Download Manager 4.0 2 Internet Download Manager Corp. Internet Download Manager 4.0 1 Internet Download Manager Corp. Internet Download Manager 5.19 Internet Download Manager Corp. Internet Download Manager 5.18 Internet Download Manager Corp. Internet Download Manager 5.15 Build 3 Internet Download Manager Corp. Internet Download Manager 5.14 Internet Download Manager Corp. Internet Download Manager 4.00 Internet Download Manager Corp. Internet Download Manager 3.x Internet Download Manager Corp. Internet Download Manager 2.x |
| Not Vulnerable: | |
Discussion
Internet Download Manager 'idmmkb.dll' DLL Loading Arbitrary Code Execution Vulnerability
Internet Download Manager is prone to a vulnerability that lets attackers execute arbitrary code.
An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
javascript:__doPostBack('rptrSearchResults$ctl01$btnCopy','')
Internet Download Manager is prone to a vulnerability that lets attackers execute arbitrary code.
An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
javascript:__doPostBack('rptrSearchResults$ctl01$btnCopy','')
Exploit / POC
Internet Download Manager 'idmmkb.dll' DLL Loading Arbitrary Code Execution Vulnerability
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
Solution / Fix
Internet Download Manager 'idmmkb.dll' DLL Loading Arbitrary Code Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Internet Download Manager 'idmmkb.dll' DLL Loading Arbitrary Code Execution Vulnerability
References:
References:
- Application DLL Load Hijacking (HD Moore)
- DLL Hijacking �?? Vulnerable Applications (exploit-db.com)
- Exploiting DLL Hijacking Flaws (hdm)
- Internet Download Manager Homepage (Internet Download Manager Corp.)
- Microsoft Security Advisory 2269637 Released (Microsoft)
- More information about the DLL Preloading remote attack vector (Microsoft)
- Microsoft Security Advisory (2269637) (Microsoft)