Fotobook Editor 5.0 DLL Hijacking Vulnerability

[o] Fotobook Editor 5.0 DLL Hijacking Vulnerability

Software : Fotobook Editor 5.0 version 2.8.0.1 (CCPublisher.exe)
Vendor : http://www.fotobook.co.uk/
Author : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
Contact : public[at]antisecurity[dot]org
Home : http://antisecurity.org/


[o] Vulnerable DLL

fwpuclnt.dll


[o] Extension

.dtp


[o] PoC

http://antisecurity.org/sploit/fotobook_dll.zip
http://www.packetstormsecurity.org/1009-exploits/fotobook-dllhijack.tgz


[o] Usage

+ Unzip fotobook_dll.zip
+ Double click exploit.kcp or open with KinetiCount.exe
+ You will see calc pop up


[o] Tested On

Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 2 Build 2600