3D XML Player Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	53560
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 16 2012 12:00AM
Updated:	May 16 2012 12:00AM
Credit:	Parvez Anwar
Vulnerable:	Dassault Systemes 3D XML Player 6.212.13.12076
Not Vulnerable:

3D XML Player Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

3D XML Player is prone to multiple arbitrary-code-execution vulnerabilities that let attackers execute arbitrary code.

An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.

3D XML Player 6.212.13.12076 is vulnerable; other versions may also be affected.

3D XML Player Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

References:

• 3D XML Player Homepage (Dassault Systemes)
  
• Application DLL Load Hijacking (HD Moore)
  
• DLL Hijacking �?? Vulnerable Applications (exploit-db.com)
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• Microsoft Security Advisory 2269637 Released (Microsoft)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• Microsoft Security Advisory (2269637) (Microsoft)