vendor:
Sync Manager
by:
SecurityFocus
9,3
CVSS
HIGH
Arbitrary Code Execution
94
CWE
Product Name: Sync Manager
Affected Version From: 2.1.46.0
Affected Version To: 2.1.46.0
Patch Exists: YES
Related CWE: N/A
CPE: a:htc:sync_manager
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2013
HTC Sync Manager Arbitrary Code Execution Vulnerability
HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file. The code example provided includes a function called DwmSetWindowAttribute() which calls the egg() function which in turn executes the system command 'calc' to open the Windows calculator application.
Mitigation:
Users should avoid opening files from untrusted or unknown sources.