Evernote version 6.1.2.2292 suffers from a dll hijacking vulnerability.
462f590c9b8b4a5b35ee5c55b9ead4c59898748f1ec0cc547b79923c966633e1
Aloha,
Summary
Evernote contains a DLL hijacking vulnerability that could allow an
unauthenticated, remote attacker to execute arbitrary code on the targeted
system. The vulnerability exists due to some DLL file is loaded by
'Evernote_6.1.2.2292.exe' improperly. And it allows an attacker to load
this DLL file of the attackeras choosing that could execute arbitrary code
without the user's knowledge.
Affected Product:
Evernote 6.1.2.2292
Fixed in: Evernote for Windows 6.3 (WINNOTE-15637
<https://evernote.com/security/updates/>)
Tested on: Windows 7
Impact
Attacker can exploit this vulnerability to load a DLL file of the
attacker's choosing that could execute arbitrary code. This may help
attacker to Successful exploit the system if user creates shell as a DLL.
Vulnerability Scoring Details
The vulnerability classification has been performed by using the CVSSv2
scoring system (http://www.first.org/cvss/).
Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Proof of concept/demonstration:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1. Create a malicious 'dwmapi.dll' or 'ntmarta.dll' file and save it in
your "Downloads" directory.
2. Download 'Evernote_6.1.2.2292.exe' from and save it in your "Downloads"
directory.
3. Execute .exe from your "Downloads" directory.
4. Malicious dll file gets executed.
Chao!!
Himanshu Mehta