15 lines
No EOL
596 B
Text
15 lines
No EOL
596 B
Text
# Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs
|
|
# Date: 01-03-2016
|
|
# Exploit Author: Shantanu Khandelwal Twitter: @shantanu561993 <shantanu561993@gmail.com>
|
|
# Vendor Homepage: http://www.viscomsoft.com/
|
|
# Software Link: http://www.viscomsoft.com/downloads/calendar.html
|
|
# Version: 2.0
|
|
# Tested on: Windows XP IE-8 , Windows 7 IE-8
|
|
|
|
Multiple Vulnerabilities found in calender.ocx file
|
|
Multiple Access violations
|
|
|
|
POC:
|
|
|
|
https://www.dropbox.com/s/rtakkmw9ru55lbn/CALENDARLib.zip?dl=0
|
|
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39512.zip |