The Anatomy of COM Server-Based Binary Planting Exploits[May 6, 2011 update: we published a proof of concept for this vulnerability.] Last week at the Hack In The Box conference in Amsterdam we presented some techniques for advanced exploitation of binary planting bugs. The stage was set by our previous blog post where we described how unsafely registered COM server DLLs, as well as safely registered COM server DLLs that make unsafe binary loading call
