MS Internet Explorer 7 (DLL-load hijacking) Code Execution Exploit PoC

/*
Copyright (C) 2006-2007 Aviv Raff
http://aviv.raffon.net
Greetz: hdm, L.M.H, str0ke, SkyLined

Compile and upload to the victim's desktop as one of the following hidden DLL files:
- sqmapi.dll
- imageres.dll
- schannel.dll

Run IE7 and watch the nice calculators pop up.
Filter fdwReason to execute only once.

Tested on WinXP SP2 with fully patched IE7.
For testing/educational purpose only!
*/

Please note that this isn't your normal drive-by-download type of vulnerability. The DLL would need to be uploaded to the victim's PC.

http://www.milw0rm.com/exploits/2929