Exploit Microsoft MSN Messenger 7.x/8.0? - Video Remote Heap Overflow

[Exploiter]

EDB-ID

4334

Проверка EDB

1. Пройдено

Автор

WUSHI

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2007-2931

Дата публикации

2007-08-29

MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit

thanks ole andre again, His ospy is perfect.

1.compile the dll.
2.inject the dll to msn messenger 7.0.777.0 's process.
3. choose "send my webcam" to a contact id who is online using 7.x (8.0?).
4.when the otherside accept the invatation , the otherside's msn will be at least crashed, if you using aChinese version windows 2000 sp4 , maybe a reverse shell , if other verison windows 2000, you need adjust the jmpa address in the dll's sourcecode. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30537.rar (08292007-exp_msn.rar)

# milw0rm.com [2007-08-29]