# Exploit Title: Attachmate Reflection Standard Suite 2008 activex buffer
overflow
# Date: Mar 11, 2010 found
# Author: Rad L. Sneak (JB)
# Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm
# Version: 13.0 & 14.0
# Tested on: WinXP SP3 & Win7 64bit
# CVE : None yet
Attachmate Reflection Standard Suite 2008 & Reflection X Both contain a
buffer overflow that could be triggered via activex. when r2axctrl.ocx is
sent large string to the Reflection for UNIX & OpenVMS control class a
crash happens that overwrites EIP with 41414141.
# Code : [PoC exploit below]
___________________________________________________________________________
___
PoC1
___________________________________________________________________________
________
May need to throw a refresh to trigger PoC2 completely
___________________________________________________________________________
_______
PoC2
___________________________________________________________________________
________________
Preference : http://securityreason.com/exploitalert/8268
0 comments:
Post a Comment
silahkan tinggalkan komentar anda disini .. :D