cve/cves/2010/CVE-2010-3129.md

CVE-2010-3129

Description

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.

POC

Reference

• http://www.exploit-db.com/exploits/14748
• http://www.exploit-db.com/exploits/14726

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/14748
• https://www.exploit-db.com/exploits/14726