PKZIP dwmapi DLL Hijacking Exploit

PKZIP is prone to a vulnerability that may allow the execution of any library file named dwmapi.dll, if this dll is located in the same folder than a .ZIPX file. The attacker must entice a victim into opening a specially crafted .ZIPX file. This file and the associated binary may be delivered to a user through remote WebDAV shares. An attacker may exploit this issue to execute arbitrary code.
Exploit Platform
Exploit Type
Product Name