CVE-2016-3235

Related Files

Office OLE DLL Hijacking

Posted Nov 10, 2016

Authored by Yorick Koster | Site metasploit.com

Multiple DLL side loading vulnerabilities were found in various COM components. These issues can be exploited by loading various these components as an embedded OLE object. When instantiating a vulnerable object Windows will try to load one or more DLLs from the current working directory. If an attacker convinces the victim to open a specially crafted (Office) document from a directory also containing the attacker's DLL file, it is possible to execute arbitrary code with the privileges of the target user. This can potentially result in the attacker taking complete control of the affected system.

tags | exploit, arbitrary, vulnerability

systems | windows

advisories | CVE-2015-6128, CVE-2015-6132, CVE-2015-6133, CVE-2016-0041, CVE-2016-0100, CVE-2016-3235

SHA-256 | 54a85ca989c4eaff178f934a3bf1f889b5563dba98e78c59197f8309e65b7406

Download | Favorite | View

Microsoft Visio DLL Hijacking

Posted Jun 15, 2016

Authored by Yorick Koster, Securify B.V.

Microsoft Visio suffers from a DLL hijacking vulnerability.

tags | advisory

systems | windows

advisories | CVE-2016-3235

SHA-256 | 53c0212c96208c6e0d2e1e1d7370c5d98fdadabd301ae83fe691067fc4c7adc9

Download | Favorite | View