Gromada Multimedia Conversion Library DLL Loading Arbitrary Code Execution Vulnerability

Bugtraq ID:	43467
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 24 2010 12:00AM
Updated:	Sep 24 2010 12:00AM
Credit:	anT!-Tr0J4n
Vulnerable:	Gromada Gromada Multimedia Conversion Library 5.4
Not Vulnerable:

Gromada Multimedia Conversion Library DLL Loading Arbitrary Code Execution Vulnerability

Gromada Multimedia Conversion Library is prone to a vulnerability that lets attackers execute arbitrary code.

An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.

DVD PixPlay is also vulnerable because it uses the vulnerable version of Gromada Multimedia Conversion Library.

Gromada Multimedia Conversion Library 5.4.0 and DVD PixPlay 6.12 are vulnerable; other versions may also be affected.

Gromada Multimedia Conversion Library DLL Loading Arbitrary Code Execution Vulnerability

A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

Gromada Multimedia Conversion Library DLL Loading Arbitrary Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gromada Multimedia Conversion Library DLL Loading Arbitrary Code Execution Vulnerability

References:

• Application DLL Load Hijacking (HD Moore)
  
• DVD PixPlay Homepage (Xequte Software)
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• Gromada Homepage (Gromada)
  
• Microsoft Security Advisory 2269637 Released (Microsoft)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• Microsoft Security Advisory (2269637) (Microsoft)