high7.8Public exploit code
CVE-2022-47636
A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OutSystems Service Studio 11.53.30 - DLL Hijacking2023-08-10 · local · windows
Impact
A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Modeling Language), the application will load the following DLLs from the same directory av_libGLESv2.dll, libcef.DLL, user32.dll, and d3d10warp.dll. Using a crafted DLL, it is possible to execute arbitrary code in the context of the current logged in user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Outsystems | Service Studio | Version 11.53.30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/174127/OutSystems-Service-Studio-11.53.30-DLL-Hijacking.html
- https://www.exploit-db.com/exploits/51678
- http://packetstormsecurity.com/files/174127/OutSystems-Service-Studio-11.53.30-DLL-Hijacking.html
- https://www.exploit-db.com/exploits/51678