windows community v1.0.0

mediainfo_i386.dll

mediainfo_i386.dll — Sideloading hijacking (MediaInfo)

📋 Live Preview 
mediainfo_i386.dll
mediainfo_i386.dll

Sandbox: execFile · Timeout: 30s

Capabilities

security.defenseevasion.dll-hijack

Documentation

examples:

  • description: "Place malicious mediainfo_i386.dll in the search order location" command: "copy malicious.dll "%PROGRAMFILES%\MediaInfo\mediainfo_i386.dll""
  • description: "Execute the vulnerable binary to trigger the hijack" command: ""%PROGRAMFILES%\MediaInfo\MediaInfo.exe""

mediainfo_i386.dll

Vendor: MediaInfo

Expected Location: %PROGRAMFILES%\MediaInfo

Vulnerable Executables:

  • %PROGRAMFILES%\MediaInfo\MediaInfo.exe (Sideloading)

Acknowledgement: Michael Elford

Acknowledgement: Jai Minton

References