Quick Notes Plus Multiple DLL Loading Arbitrary Code Execution Vulnerability
BID:45689
Info
Quick Notes Plus Multiple DLL Loading Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 45689 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2011 12:00AM |
| Updated: | Jan 05 2011 12:00AM |
| Credit: | d3c0der |
| Vulnerable: |
Conceptworld Corporation Quick Notes Plus 5.0 47 |
| Not Vulnerable: | |
Discussion
Quick Notes Plus Multiple DLL Loading Arbitrary Code Execution Vulnerability
Quick Notes Plus is prone to an arbitrary-code-execution vulnerability.
Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application.
Quick Notes Plus 5.0.0.47 is vulnerable; other versions may also be affected.
Quick Notes Plus is prone to an arbitrary-code-execution vulnerability.
Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application.
Quick Notes Plus 5.0.0.47 is vulnerable; other versions may also be affected.
Exploit / POC
Quick Notes Plus Multiple DLL Loading Arbitrary Code Execution Vulnerability
Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.