← Advisories

Help & Manual Professional Edition 5.5.1 (ijl15.dll) DLL Hijacking Exploit

High

Advisory ID

ZSL-2011-5009

Release Date

14 April 2011

Vendor

EC Software GmbH - http://www.helpandmanual.com

Affected Version

5.5.1 Build 1296

CVE

CVE-2011-5155

Tested On

Microsoft Windows XP Professional SP3 (EN)

Summary

Help & Manual 5 is a single-source help authoring and content management system for both single and multi-author editing.

Description

Help & Manual suffers from a DLL hijacking vulnerability that enables the attacker to execute arbitrary code on the affected machine. The vulnerable extensions are hmxz, hmxp, hmskin, hmx, hm3, hpj, hlp and chm thru ijl15.dll Intel's library.

Proof of Concept

helpmanual_dll.cTXT

Disclosure Timeline

N/A

Credits

Vulnerability discovered by Gjoko Krstic

References

[1]http://packetstormsecurity.org/files/100426

[2]http://securityreason.com/exploitalert/10340

[3]http://secunia.com/advisories/44170/

[4]http://www.securityfocus.com/bid/47349

[5]http://osvdb.org/show/osvdb/71829

[6]http://cve.mitre.org/cgi-bin/cvename.cgi?name=2011-5155

Changelog

14.04.2011Initial release

15.04.2011Added reference [2], [3] and [4]

18.04.2011Added reference [5]

07.09.2012Added reference [6]