CyberLink PowerProducer Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	55380
Class:	Input Validation Error
CVE:	CVE-2012-4758
Remote:	Yes
Local:	No
Published:	Sep 03 2012 12:00AM
Updated:	Sep 06 2012 09:19PM
Credit:	Parvez Anwar via Secunia
Vulnerable:
Not Vulnerable:

CyberLink PowerProducer Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

CyberLink PowerProducer is prone to multiple vulnerabilities that allow attackers to execute arbitrary code.

Successful exploits will allow the attackers to execute arbitrary code in the context of the user running the affected application.

CyberLink PowerProducer 5.5.3.2325 is vulnerable; other versions may also be affected.

CyberLink PowerProducer Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit these issues.

A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

CyberLink PowerProducer Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

CyberLink PowerProducer Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

References:

• Application DLL Load Hijacking (HD Moore)
  
• CyberLink Homepage (CyberLink)
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• Microsoft Security Advisory 2269637 Released (Microsoft)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• Microsoft Security Advisory (2269637) (Microsoft)