CVE-2008-1307: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

KingSoft - UpdateOcx2.dll SetUninstallName() Heap Overflow (PoC)

KingSoft - UpdateOcx2.dll SetUninstallName Heap Overflow PoC var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o...