Microsoft DirectX SDK (June 2010) Xact3.exe DLL Hijacking

The Microsoft DirectX SDK “Xact3.exe” cross-platform tool allows for arbitrary code execution via a trojan horse file “xbdm.dll” in the current working directory, upon opening a “.xap” project file from the same location.

Leave a Reply