Microsoft Visio 2010 v14.0.4514.1004 (dwmapi.dll) DLL Hijacking Exploit

Title: Microsoft Visio 2010 v14.0.4514.1004 (dwmapi.dll) DLL Hijacking Exploit
Advisory ID: ZSL-2010-4959
Type: Local/Remote
Impact: System Access
Risk: (4/5)
Release Date: 26.08.2010
Summary
Microsoft Visio is a diagramming program for Microsoft Windows that uses vector graphics to create diagrams.
Description
MS Visio 2010 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .vss thru dwmapi.dll library.
Vendor
Microsoft Corp. - http://www.microsoft.com
Affected Version
14.0.4514.1004 MSO (14.0.4536.1000)
Tested On
Microsoft Windows XP Professional SP3 (English)
Vendor Status
N/A
PoC
msvisio_dll.c
Credits
Vulnerability discovered by Gjoko Krstic - <gjoko@zeroscience.mk>
References
[1] http://www.packetstormsecurity.org/filedesc/msvisio_dll.txt.html
[2] http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/
[3] http://www.exploit-db.com/dll-hijacking-vulnerable-applications/
Changelog
[26.08.2010] - Initial release
[27.08.2010] - Added reference [1], [2] and [3]
Contact
Zero Science Lab

Web: http://www.zeroscience.mk
e-mail: lab@zeroscience.mk