GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
BID:49449
Info
GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
| Bugtraq ID: | 49449 |
| Class: | Design Error |
| CVE: |
CVE-2010-4831 CVE-2010-4833 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2011 12:00AM |
| Updated: | Apr 13 2015 09:05PM |
| Credit: | Naoto Katsumi of LAC Co., Ltd |
| Vulnerable: |
GTK GTK+ 2.18.5 GTK GTK+ 2.18.4 GTK GTK+ 2.8.6 GTK GTK+ 2.8.3 GTK GTK+ 2.6.7 GTK GTK+ 2.6.4 GTK GTK+ 2.4.14 GTK GTK+ 2.4.13 GTK GTK+ 2.4.10 GTK GTK+ 2.4.9 GTK GTK+ 2.4.1 GTK GTK+ 2.2.4 GTK GTK+ 2.2.3 GTK GTK+ 2.2.1 GTK GTK+ 2.0.6 GTK GTK+ 2.0.2 GTK GTK+ 2.10.3 |
| Not Vulnerable: |
GTK GTK+ 2.24 |
Discussion
GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
GTK+ is prone to multiple vulnerabilities that let attackers execute arbitrary code.
An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
GTK+ is prone to multiple vulnerabilities that let attackers execute arbitrary code.
An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
Exploit / POC
GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
Solution / Fix
GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references for more details.
Solution:
Updates are available. Please see the references for more details.
References
GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
References:
References:
- Application DLL Load Hijacking (HD Moore)
- Exploiting DLL Hijacking Flaws (hdm)
- GIT COMMIT: Avoid potential DLL hijacking in ms-windows theme engine (GNOME)
- GIT COMMIT: Avoid potential DLL hijacking in Wintab code (GNOME)
- GTK+ Homepage (GTK+)
- JVN#58019849 GTK+ may insecurely load dynamic libraries (JPCERT/CC and IPA)
- Microsoft Security Advisory 2269637 Released (Microsoft)
- More information about the DLL Preloading remote attack vector (Microsoft)
- Microsoft Security Advisory (2269637) (Microsoft)