Status Tracking Note JVNTR-2010-23

Microsoft Windows Insecurely Loads Dynamic Libraries (TA10-238A)

Overview

Due to the way Microsoft Windows loads dynamically linked libraries (DLLs), an application may load an attacker-supplied DLL instead of the legitimate one, resulting in the execution of arbitrary code.
Event Information


Date (UTC)Description
2011-03-08 19:28 Microsoft
ms11-mar: Microsoft Security Bulletin Summary for March 2011
Security Update (MS11-015, CVE-2011-003) released.
Security Update (MS11-016, CVE-2010-3146) released.
Security Update (MS11-017, CVE-2011-0029) released.
2011-02-08 18:16 Microsoft
ms11-feb: Microsoft Security Bulletin Summary for February 2011
Security Update (MS11-003, CVE-2011-0038) released.
2011-01-12 18:07 Microsoft
ms11-jan: Microsoft Security Bulletin Summary for January 2011
Security Update (MS11-001, CVE-2010-3145) released.
2010-12-14 19:13 Microsoft
ms10-dec: Microsoft Security Bulletin Summary for December 2010
Security Update (MS10-093, CVE-2010-3967) released.
Security Update (MS10-094, CVE-2010-3965) released.
Security Update (MS10-095, CVE-2010-3966) released.
Security Update (MS10-096, CVE-2010-3147) released.
Security Update (MS10-097, CVE-2010-3144) released.
2010-11-04 Adobe
APSB10-26: Security update available for Adobe Flash Player
Security Update (CVE-2010-3976) released.: Flash Player 10.1.102.64/9.0.289.0
2010-10-20 Mozilla Foundation
MFSA 2010-71: Unsafe library loading vulnerabilities
Security Update (CVE-2010-3181,CVE-2010-3182) released.: Firefox 3.6.11/3.5.14, Thunderbird 3.1.5/3.0.9
2010-10-18 Adobe
APSB10-24: Security update available for InDesign
Security Update (CVE-2010-3153) released.: InDesign CS5 7.0.3/CS4 6.0.6, InDesign Server CS5 7.0.3, InCopy CS5 7.0.3/CS4 6.0.6
2010-09-15 Apple
HT4339: About the security content of QuickTime 7.6.8
Security Update (CVE-2010-1819) released.: QuickTime 7.6.8
2010-09-07 Mozilla Foundation
MFSA 2010-52: Windows XP DLL loading vulnerability
Security Update (CVE-2010-3131) released.: Firefox 3.6.9/3.5.12, Thunderbird 3.1.3/3.0.7
2010-09-01 14:27 US-CERT
Insecure Loading of Dynamic Link Libraries in Windows Applications
US-CERT Current Activity
Public notification for "Workaround (Fix it 50522) ".
2010-08-31 23:21 Microsoft
Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution
Fix it (Disable loading of libraries from WebDAV and remote network shares) released.
2010-08-26 20:40 US-CERT
TA10-238A: Microsoft Windows Insecurely Loads Dynamic Libraries
Technical Cyber Security Alert publised via US-CERT Mailing List.
Public notification for "Microsoft Windows based applications may insecurely load dynamic libraries"
2010-08-25 16:01 US-CERT
Insecure Loading of Dynamic Link Libraries in Windows Applications
US-CERT Current Activity
Public notification for "Security Advisory (VU#707943) ".
2010-08-25 06:44 Metasploit Project
Better, Faster, Stronger: DLLHijackAuditKit v2
DLLHijackAuditKit V2 released.
2010-08-25 Exploit-Database
DLL Hijacking - Vulnerable Applications
Public notification for "Microsoft Windows based applications may insecurely load dynamic libraries"
2010-08-24 00:19 Microsoft
Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution
Security Advisory (2269637) published.
2010-08-23 05:48 Metasploit Project
Exploiting DLL Hijacking Flaws
DLLHijackAuditKit released.
2010-08-23 SANS Internet Storm Center
DLL hijacking vulnerabilities
Vulnerability information and Audit tool have been circulated in-the-wild.
2010-08-18 15:05 ACROS
ASPR #2010-08-18-1-PUB: Remote Binary Planting in Apple iTunes for Windows
Security Advisory (CVE-2010-1795) published.
2010-08-12 Apple
HT4105: About the security content of iTunes 9.1
Security Update (CVE-2010-1795) released.: iTunes 9.1
2010-04-12 16:51 ACROS
ASPR #2010-04-12-1-PUB: Remote Binary Planting in VMware Tools for Windows
Security Advisory (CVE-2010-1141) published.
2010-03-30 VMware
VMSA-2010-0007: VMware hosted products, vCenter Server and ESX patches resolve multiple security issues
Security Update (CVE-2010-1141) released.
2010-01-31 University of California, Davis campus
CSE-2010-2.pdf: Automatic Detection of Vulnerable Dynamic Component Loadings
Technical report posted to Web site.
2004-09-02 Microsoft
Dynamic-Link Library Search Order
Windows XP SP2 SafeDllSearchMode (DLL search mode is enabled by default) released.
2003-07-03 Microsoft
Dynamic-Link Library Search Order
Windows 2000 SP4 SafeDllSearchMode (Safe DLL search mode is disabled by default) released.
2001-11-16 Microsoft
Dynamic-Link Library Search Order
Windows XP SafeDllSearchMode (Safe DLL search mode is disabled by default) released.
2000-09-18 Georgi Guninski
Georgi Guninski security advisory #21, 2000 : Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases
Vulnerability proof-of-concept code posted to Web site.

Reference

Date first published (UTC): 2010-09-12T03:51+00:00
Date last updated (UTC): 2011-03-13T15:53+00:00
Valid HTML 4.01!