注册 登录  
 加关注
   显示下一条  |  关闭
温馨提示!由于新浪微博认证机制调整,您的新浪微博帐号绑定已过期,请重新绑定!立即重新绑定新浪微博》  |  关闭

K8拉登哥哥's Blog

K8搞基大队[K8team] 信息安全 网络安全 0day漏洞 渗透测试 黑客

 
 
 

日志

 
 

[0day].NET Framework 4.6 DLL Hijacking  

2016-04-19 16:52:36|  分类: 0day漏洞 |  标签: |举报 |字号 订阅

  下载LOFTER 我的照片书  |
------------------------------------------------------------------------
.NET Framework 4.6 allows side loading of Windows API Set DLL
------------------------------------------------------------------------
Yorick Koster, February 2016

------------------------------------------------------------------------
Abstract
------------------------------------------------------------------------
A DLL side loading vulnerability was found in the .NET Framework version
4.6 when running on Windows Vista or Windows 7. This issue can be
exploited by luring a victim into opening an Office document from the
attacker's share. An attacker can use this issue to execute arbitrary
code with the privileges of the target user. This can potentially result
in the attacker taking complete control of the affected system. If the
WebDAV Mini-Redirector is enabled, it is possible to exploit this issue
over the internet. This issue can be exploited even if the Office
document is opened in Protected View.

------------------------------------------------------------------------
See also
------------------------------------------------------------------------
- CVE-2016-0148
- MS16-041 : Security Update for .NET Framework (3148789)
- http://www.greyhathacker.net/docs/OfficeDLLhijacking.zip
- https://twitter.com/matthias_kaiser/status/697163250111291398
- 
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-PPT-VIEWER-CODE-EXEC.txt

------------------------------------------------------------------------
Tested versions
------------------------------------------------------------------------
This issue was successfully verified on Vista running Office 2010 and
.NET 4.6.81.0 & Windows 7 running Office 2013 and .NET 4.6.1055.0.

------------------------------------------------------------------------
Fix
------------------------------------------------------------------------
Microsoft released MS16-041 that fixes this vulnerability.

------------------------------------------------------------------------
Details
------------------------------------------------------------------------
https://www.securify.nl/advisory/SFY20160201/_net_framework_4_6_allows_side_loading_of_windows_api_set_dll.html
  评论这张
 
阅读(834)| 评论(0)
推荐 转载

历史上的今天

在LOFTER的更多文章

评论

<#--最新日志,群博日志--> <#--推荐日志--> <#--引用记录--> <#--博主推荐--> <#--随机阅读--> <#--首页推荐--> <#--历史上的今天--> <#--被推荐日志--> <#--上一篇,下一篇--> <#-- 热度 --> <#-- 网易新闻广告 --> <#--右边模块结构--> <#--评论模块结构--> <#--引用模块结构--> <#--博主发起的投票-->
 
 
 
 
 
 
 
 
 
 
 
 
 
 

页脚

网易公司版权所有 ©1997-2016