Reflection Attachmate Reflection Standard Suite 2008 ActiveX Buffer Overflow

Exploit Code :

# Exploit Title: Reflection Attachmate Reflection Standard Suite 2008
activex buffer overflow
# Date: Mar 11, 2010 found
# Author: Rad L. Sneak (JB)
# Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm
# Version: 13.0 & 14.0
# Tested on: WinXP SP3 & Win7 64bit
# CVE : None yet


Attachmate Reflection Standard Suite 2008 & Reflection X Both contain a
buffer overflow that could be triggered via activex. when r2axctrl.ocx is
sent large string to the Reflection for UNIX & OpenVMS control class a
crash happens that overwrites EIP with 41414141.


# Code : [PoC exploit below]
___________________________________________________________________________
___

PoC1


___________________________________________________________________________ ________ May need to throw a refresh to trigger PoC2 completely ___________________________________________________________________________ _______ PoC2
___________________________________________________________________________
________________