Yorick Koster 565a3355be CVE-2017-8464 LNK Remote Code Execution Vulnerability ...

This module exploits a vulnerability in the handling of Windows
Shortcut files (.LNK) that contain a dynamic icon, loaded from a
malicious DLL.

This vulnerability is a variant of MS15-020 (CVE-2015-0096). The
created LNK file is similar except in an additional
SpecialFolderDataBlock is included. The folder ID set in this
SpecialFolderDataBlock is set to the Control Panel. This is enought to
bypass the CPL whitelist. This bypass can be used to trick Windows into
loading an arbitrary DLL file.

2017-08-02 15:46:30 -05:00

..

cve_2017_8464_lnk_rce.md

CVE-2017-8464 LNK Remote Code Execution Vulnerability

2017-08-02 15:46:30 -05:00

office_word_hta.md

Use a built-in HTA server and update doc

2017-04-24 16:04:27 -05:00